When developing a comprehensive security plan, which of the following would provide the greatest asset to the company?

A$.$ Employees should be trained in security measures.

B$.$ Participants should receive certificates before training sessions.

C$.$ Management should expect employees to implement their training.

D$.$ Employee passwords and ID badges should be periodically revoked.