Discuss the advantage gained by an effective, organization-wide training program.

What will be an ideal response?

The advantage gained by an effective, organization-wide training program of this type cannot be overstated. Security is a complex and multidisciplinary challenge, which is rooted more in individual behavior than technology. Most security problems arise from the failure of individuals to follow correct procedures, or from an individual's inability or unwillingness to comply with security requirements. A properly functioning training program will provide workers with the knowledge necessary to do their jobs correctly. In addition, it will reinforce the cultural and behavioral norms associated with the security operation. Then, if an individual employee subsequently breaches those norms, the organization will be able to enforce accountability. That combination of knowledge and motivation allows the overall cybersecurity goals of the organization to be assured and maintained with confidence.