During a security audit, you find that some employees have been sharing passwords for accessing sensitive systems. What corrective action should be taken?

Provide additional training on password security.

If password sharing cannot be avoided, a password managershould be utilized and shared passwords checked out for use.

Issue new passwords to all affected employees.

Document the finding and report it to management for disciplinary action.