You've been tasked with chairing a meeting between various departments of your organization. The purpose of the meeting is to explain why weak passwords, while they are a problem, do not originate with IT$.$ How would you BEST explain this message?

While IT can set up enforcement policies and encourage users to choose more sophisticated passwords, the legal team is responsible because Legal is supposed to make users aware of the implications of using weak passwords.

Weak passwords are an unfortunate byproduct of using information systems in the workplace, and no single group is to blame more than another group.

Weak passwords are an unintentional threat stemming from employees and, therefore, do not originate from IT; however, IT can set up enforcement policies and encourage users to choose more sophisticated passwords.

While IT can set up enforcement policies and encourage users to choose more sophisticated passwords, it is really the software vendors who have the burden of ensuring that only strong passwords can be used.