The organizations had taken steps to ensure that personnel involved in various aspects of their information security programs had the skills and knowledge they needed.
The organizations carried out extensive interviews for hiring information security personnel.