A chief information security officer $($CISO$)$ seeks to raise employee awareness of the dangers of malware in the organization. Which of the following is the best approach?

A$.$ The CISO should distribute a written explanation of how malware works to each employee.

B$.$ The CISO should talk about how malware could prevent the service desk from helping a customer.

C$.$ The CISO should explain the technical way in which malware can infect a machine.

D$.$ The CISO should arrange for an IT expert on malware to give a presentation to employees.