Which of the following would be MOST helpful to the information security manager tasked with enforcing enhanced password standards?

A. Conducting password strength testing
B. Reeducating end users on creating strong complex passwords
C. Implementing a centralized identity management system
D. Implementing technical password controls to include strong complexity