Why do Certificate Authority (CA) play an important role in a company's information security management?

Multiple Choice

Using a CA is required by SOX in managing information security.

A CA is responsible to generate session keys for encryption purposes.

Most companies use CA to manage their employees public keys.

CA creates and maintains both the public and private keys for a companys employees.