Human Resources (HR) would like executives to undergo only two specific security training programs a year. Which of the following provides the BEST level of security training for the executives?…

Acceptable use of social media is too narrow and operational, not a priority security topic for executive-level training.

Data handling and disposal is more relevant for staff who routinely process and manage records, not a top priority for executives.

Zero day exploits and viruses is a highly technical topic better suited for IT/security staff, not executives.

Phishing threats and attacks is critical for executives because they are prime targets for spear-phishing and business email compromise due to their authority and access to sensitive data.

Clean desk and BYOD policies are procedural topics more relevant to general staff, not the most impactful training for executives.

Information security awareness is the foundational training for any security program, covering broad policies and responsibilities that are directly applicable to executives regardless of technical depth.