ISO 27001 · clause 7
Competence is for a few people, awareness is for everyone
7.2
Competence
Applies to
The people whose work affects security: access reviews, firewall, incidents
Asks
Can this person do the job?
Evidence
A certificate, years of experience, a training record, a handover
7.3
Awareness
Applies to
Everyone working under your control, contractors included
Asks
Does everyone know the basics?
Evidence
Your staff answering the auditor's question the same way