Which of the following would BEST help minimize the risk associated with social engineering threats?

A. Reviewing the organization’s risk appetite
B. Enforcing employee sanctions
C. Enforcing segregation of duties
D. Conducting phishing exercises