Which measure helps ensure staff awareness of security policies?

• A. Staff training
• B. Installing more servers
• C. Extending password length
• D. Reducing security controls

Answer: (A)

Staff awareness of security policies comes from education that clearly explains what the policies require, why they matter, and how to apply them in everyday work. Staff training does this directly by teaching the rules, demonstrating proper practices, and giving employees chances to practice and be tested on their understanding. It also helps keep everyone up to date when policies change and reinforces the expected behaviors, such as recognizing phishing attempts, handling data correctly, and reporting incidents.

Installing more servers changes infrastructure but doesn’t educate people about the rules they must follow. Extending password length is a specific rule within a policy, not a method for ensuring widespread understanding of all security policies. Reducing security controls would weaken protection and isn’t about building awareness.