Which of the following is the main goal of a security awareness program? And during which phase of the incident response process would developing a user awareness program be useful?

It provides a clear understanding of potential risk and exposure. The user awareness training is part of the preparation phase.

B It provides a clear understanding of potential risk and exposure. The user awareness training is part of the containment, eradication, and recovery phase.

It provides a forum to communicate user responsibilities. The user awareness training is part of the preparation phase.

It provides a forum for discussing exposure and associated risk analysis. The user awareness training is part of the preparation phase.