Question $9$ of $50$

What is the purpose of an Information Security Awareness and Training Program in ISO $27001?$

To train employees on marketing techniques

To conduct risk assessments

To develop business continuity plans

To educate employees about information security risks and responsibilities