Which of the following is recommended in the context of a comprehensive security plan?

a$.$

Employees should be trained in security measures.

b$.$

Participants should receive certificates before training sessions.

c$.$

Management should expect employees to implement their own training.

d$.$

Employee passwords and ID badges should be periodically revoked.