Which of the following administrative security controls is most likely to be adopted by a company that handles high-level sensitive information?

A) Biometric authentication for access
B) Annual security training for employees
C) Regular security audits and assessments
D) Role-based access control (RBAC) restrictions