Exam CGEIT topic 1 question 320 discussion

why not C?

C. Mandate annual security awareness training. The BEST way to mitigate the human factors of social engineering risk within an organization from a governance perspective is to mandate annual security awareness training. Social engineering attacks often exploit human vulnerabilities, such as ignorance of security best practices, lack of awareness about the risks associated with certain behaviors, and susceptibility to manipulation. Security awareness training helps employees recognize potential social engineering tactics, understand the importance of following security policies and procedures, and learn how to respond effectively to suspicious requests or activities.

From a governance perspective, the BEST way to mitigate the risk of social engineering in an organization is: C. Mandate annual security awareness training. Social engineering is a technique used by attackers to manipulate individuals into revealing sensitive information or performing actions that compromise security. It relies on exploiting human factors such as trust, curiosity, and ignorance. To address this risk, it is important to educate and raise awareness among employees about the tactics and risks associated with social engineering.