List in the proper order from the table on the top of the next page the learning objectives that are missing and their proper definitions.

A.
Understanding, recognition and retention, skill

B.
Skill, recognition and retention, skill

C.
Recognition and retention, skill, understanding

D.
Skill, recognition and retention, understanding

Explanation:
C: Awareness training and materials remind employees of their responsibilities pertaining to protecting company assets. Training provides skills needed to carry out specific
tasks and functions. Education provides management skills and decision-making capabilities.
A is incorrect because the different types of training and education do not map to the listed results. Companies today spend a lot of money on security devices and
technologies, but they commonly overlook the fact that individuals must be trained to use these devices and technologies. Without such training, the money invested toward
reducing threats can be wasted, and the company is still insecure.
B is incorrect because the different types of training and education do not map to the listed results. Different roles require different types of training or education. A skilled staff
is one of the most critical components to the security of a company.
D is incorrect because the different types of training and education do not map to the listed results. A security-awareness program is typically created for at least three types of
audiences: management, staff, and technical employees. Each type of awareness training must be geared toward the individual audience to ensure each group understands its
particular responsibilities, liabilities, and expectations.