Which of the following is the BEST performance criterion for evaluating the adequacy of an organization's security awareness training? 
A、Senior management is aware of critical information assets and demonstrates an adequate concern for their protection. 
B、Job descriptions contain clear statements of accountability for information security. 
C、In accordance with the degree of risk and business impact, there is adequate funding for security efforts. 
D、No actual incidents have occurred that have caused a loss or a public embarrassment.