Why security awareness, education and training is important within organizations

What topics should be included in security education and training? Should training only be for lower level employees, or should management be required to receive training as well?