anchor: The organizations had taken steps to ensure that personnel involved in various aspects of their information security programs had the skills and knowledge they needed.
positive: The organizations hired personnel for their information security programs.
negative: The organizations did not employ people for their information security programs.