In your opinion, who should pay for the expenses of certification? Under what circumstances would your answer be different? Why?
List and describe the standard personnel practices that are part of the InfoSec function. What happens to these practices when they are integrated with InfoSec concepts?