Discuss the goal of the training and awareness function.

What will be an ideal response?

The goal of the training and awareness function is to ensure a reliable level of secure practice across the entire organization. The awareness part is responsible for communicating the fundamental concepts of information security to everybody in the organization. Those basic concepts are meant to assure a floor level of general knowledge for the overall workforce. On the other hand, a minimum level of basic awareness does not ensure the effectiveness of individual members of the security staff. That kind of assurance can only be provided by focused training. The training function is responsible for making certain that the individuals who perform specific information security tasks have all of the requisite knowledge, skills, and abilities to carry out their designated duties.