Why do Certificate Authority $($CA$)$ play an important role in a company's information security management?

a$.$

Using a CA is required by SOX in managing information security.

b$.$

A CA is responsible to generate session keys for encryption purposes.

c$.$

Most companies use CA to manage their employees$$ public keys.

d$.$

CA creates and maintains both the public and private keys for a company$$s