Which of the following is the BEST indication of an improved risk-aware culture following the implementation of a security awareness training program for all employees?

A. An increase in the number of identified system flaws
B. A reduction in the number of help desk calls
C. An increase in the number of incidents reported
D. A reduction in the number of user access resets