________ lists the following security objective with respect to current employees: “to ensure that employees, contractors, and third-party users are aware of information security threats and concerns and their responsibilities and liabilities with regard to information security and are equipped to support organizational security policy in the course of their normal work and to reduce the risk of human error”.

Fill in the blank(s) with the appropriate word(s).

ISO 27002