A critical best practice recognized by virtually every industry and profession is a program of ongoing training and education.  Only through the process of updating skills, gaining new knowledge, and understanding changes in professional expectations are people equipped to fulfill their roles in an organization.  This is especially important in security and risk management where the majority of risk realization and negative outcomes are directly or indirectly related to the actions or behaviors of individuals.

The IOSC education program provides a complete professional training curriculum for commerce security and Secure Business Process™.  This program includes classes appropriate for people in any job position and for professionals at any skill level.  The IOSC has developed a Training Matrix which identifies the courses from the core curriculum which may be appropriate for workers in various job positions.