Training of computer security professionals is also important. New developments in technology continuously create new security threats and make old solutions obsolete. Therefore, it is important for organizations to support continuing professional education for their security specialists. Unfortunately, surveys indicate that many organizations fail to adequately invest in such training.