GuardianHR is developing a new HRIS. How can GuardianHR ensure that the system adequately addresses human factors in information security, as emphasised by the McCumber Cube framework?
a. by implementing encryption techniques only during data transmission
b. by solely relying on technological countermeasures without considering human factors
c. by prioritising access control policies and training programmes to enhance employee awareness and knowledge of security threats
d. by outsourcing all security responsibilities to specialised third-party vendors by conducting regular vulnerability scans without considering human factors