What term refers to activities that increase expertise and improve management of security programs within an organization?

• A. Security Education
• B. Security Awareness
• C. Security Policy
• D. Security Architecture

Answer: (A)

Developing expertise and improving management of security programs comes from structured learning and formal training. Security education encompasses targeted learning experiences—courses, certifications, workshops, and hands-on labs—that build the knowledge and skills needed to plan, implement, and govern security efforts. It equips professionals and managers to design controls, perform risk assessments, oversee compliance, and lead security initiatives.

Security awareness, while important, focuses on informing people about threats and safe practices rather than building deep, program-wide capabilities. A security policy outlines rules and requirements, not the development of skills. Security architecture covers designing the security controls themselves, not the ongoing growth of expertise to manage the program. So, the term that best fits activities aimed at increasing expertise and improving management of security programs is security education.