279Which of the following should be of GREATEST concern to an IS auditor when auditing an organization’s information security awareness program?

A、Securityawarenesstrainingisnotincludedaspartoftheonboardingprocessfornewhires.
B、Thenumberofsecurityincidentsloggedbyemployeestothehelpdeskhasincreasedinthepastyear.
C、Trainingquizzesaredesignedandrunbyathird-partycompanyunderacontractwiththeorganization.
D、Securityawarenesstrainingisrunviatheorganization’senterprise-widee-learningportal.