C is corrent because the implementation phase involves training company personnel on how to use the system.
A is incorrect because the analysis phase involves determining the system requirements.
B is incorrect because the design phase involves designing the system.
D is incorrect. The requirement is to identify which type of control would be evidenced by the organization’s security awareness manual. D is incorrect because the planning phase would occur before any training is implemented.
| 
