What competence records must be maintained?

• A.Evidence of competence including education, training, experience, and qualifications for persons performing work affecting information security
• B.A list of mandatory certifications held by staff, the vendor training catalogue, and the annual budget approved for conferences by each department head
• C.Attendance sheets, quiz scores, and the date of the last awareness campaign for the whole workforce
• D.Job descriptions, salary bands, and the organisation chart showing reporting lines for staff in scope