Which of the following is the BEST way to validate whether controls to reduce user device vulnerabilities have been implemented according to management’s action plan?

A. Survey device owners.
B. Review awareness training assessment results.
C. Re-scan the user environment.
D. Require annual end user policy acceptance.