What is the PRIMARY goal of a Security Awareness and Training (SAT) program in an industrial organization?
-
A
To satisfy regulatory audit requirements only
-
B
To change employee behavior so they actively contribute to protecting organizational assets
-
C
To document that employees received annual briefings regardless of retention
-
D
To replace written security policies with verbal communication