An organization is concerned that its employees may be unintentionally disclosing data through the use of social media sites. Which of the following will MOST effectively mitigate tins risk?

Requiring VPNs secures network traffic but does not prevent an employee from intentionally or unintentionally posting sensitive information on a social media site while connected through the VPN.

Establishing a data classification policy defines data sensitivity levels but doesn't inherently prevent accidental disclosure if employees are unaware of the policy or the implications of their actions on social media.

User awareness training directly addresses the human element of unintentional disclosure by educating employees about the risks associated with social media, company policies, and best practices for protecting sensitive information. This proactive education empowers users to make informed decisions and reduces the likelihood of inadvertent data leaks.

Requiring employee agreement to an acceptable use policy establishes expectations but is less effective than active training in changing behavior and increasing awareness of specific risks like social media disclosure.