In a corporate environment, an IT security manager is tasked with implementing a password policy to enhance security across the organization. The policy requires that passwords must be at least 12 characters long, include a mix of uppercase letters, lowercase letters, numbers, and special characters. Additionally, employees are required to change their passwords every 90 days. If an employee\'s password is compromised, they must change it immediately and cannot reuse any of their last five passwords. Considering these requirements, which of the following strategies would best ensure compliance and enhance password security among employees?