Which one of the following is the best example of avoiding risk?

A. The IT department decides to install an antivirus device at its network border.

B. The IT department outsources its vulnerability management program to a third party.

C. The IT department disables the ability for end users to use portable storage devices.

D. The IT department installs data loss prevention software on all end users’ workstations.