Your manager has tasked you with sponsoring a $30-$minute phone call with HR$,$ legal, and the business units to explain why weak passwords are not an IT$-$originating problem although IT can provide solutions. Which of the following explanations should you give to BEST convey this message?

Although IT can set up certain enforcement policies and require more sophisticated passwords, IT has failed to set$-$up these safeguards. Software vendors should have told IT to do this, so it's a systems software$-$originating problem.

Although IT can set up certain enforcement policies and require more sophisticated passwords, weak passwords are an unintentional threat produced by users in the employee group and, therefore, do not originate within IT itself.

Although IT can set up certain enforcement policies and require more sophisticated passwords, IT has failed to set$-$up these safeguards. The legal department should have told IT to do this, so it is a legal$-$originating problem.

Although IT can set up certain enforcement policies and require more sophisticated passwords, the blame should be placed on outside threats because they are the ones who would leverage the weak password vulnerabilities.