Three foundational issues in information security are:

Question $37$ options:

Having practitioners who are trained and pass certification exams for their speciality areas.

Having practitioners who understand and can apply: goals of security, security terminology, and control types.

Having practitioners who understand the goals of security and the AIC triad.

Having practitioners who understand and can appropriately apply and audit controls to eliminate vulnerabilities.