A software development company recognizes that some of its employees are vulnerable to phishing attacks. To address this, the company plans to set up a training program. What factors should the company primarily consider while defining such training programs?

A$.$ The job titles of the employees

B$.$ The personal interests of the employees

C$.$ The roles performed by the employees

D$.$ The length of service of the employees