Discuss what is needed to keep the training and awareness function relevant for the whole organization.

What will be an ideal response?

The training and awareness function requires a commitment by the whole organization, particularly the top-level people, to continuously evaluate security practice in order to ensure a trustworthy state. Those reviews are needed in order to develop the specific programs that are required to achieve and then sustain that state. In order to maintain the continuing relevance of the content in those programs, the training and awareness function has to be kept up to date regarding evolving security requirements. Likewise, the materials employed in the training and awareness program also have to evolve with the changing state of security and technology in order to convey the message correctly.