Which of the following could be considered a potential security issue in an organization's IT infrastructure?
A) Using complex passwords that are difficult to remember
B) Regularly updating software and security patches
C) Employees sharing their passwords with trusted colleagues
D) Unauthorized access to sensitive data by external attackers