Which of the SETA program's three elements-education, training, and awareness-is the organization best prepared to provide itself?
Which should it consider outsourcing? How does training differ from education? Which of the two is offered to a larger audience with regard to InfoSec?