Which of the following is not considered part of a comprehensive security plan?

a$.$ Using strong passwords

b$.$ Installing antivirus programs, and making sure they are updated automatically

c$.$ Leaving logged$-$on workstations unattended

d$.$ Using physical security measures, such as corner bolts on workstations, ID badges, and door locks