An organization is planning to implement a new information security policy and wants to ensure all employees understand and formally acknowledge their responsibilities under the policy. Which of the following methods is the MOST effective to meet this objective?
Send out a company-wide email with the new policy and ask employees to reply if they do not understand the policy.
Host an organization-wide informational session where the policy is explained and have employees verbally acknowledge after the session.
Post the new information security policy on the company’s internal website and assume all employees will comply.
Distribute the policy through an electronic signature platform requiring all employees to acknowledge by signing digitally.