Network security team noticed that an increasing number of employees are becoming victims of phishing attacks. Which security program should be implemented to mitigate the problem?

While email system patches are important for securing the email infrastructure against technical vulnerabilities, they do not directly address the human element exploited by phishing attacks.

Physical access control prevents unauthorized physical access to premises and systems, which is unrelated to mitigating phishing attacks that occur via digital communication.

A software firewall enabled on all PCs helps protect against network-based threats and unauthorized access to individual computers, but it does not inherently prevent users from falling victim to social engineering tactics used in phishing.

Phishing attacks primarily target human vulnerabilities, attempting to trick users into revealing sensitive information or executing malicious actions. User awareness training educates employees on how to identify phishing attempts, recognize social engineering tactics, and follow proper security protocols, making them the first line of defense against such attacks.