Relevant training and certification ensure that the leader can implement and execute the Information Security Controls recommended by the council, and perform audits based on the standard. Training makes them familiar with processes and tools used to track/control/prevent/correct use of system and application accounts.