The president of a regional bank likes to frequently provide SOC tours to potential investors. Which of the
following policies BEST reduces the risk of malicious activity occurring after a tour?


A. Password complexity
B. Acceptable use
C. Access control
D. Clean desk