I am often shocked when I come across companies whose most valuable assets are the collective intelligence of their employees; yet, many companies that rely on information security professionals do not offer tuition reimbursement.
Ah, but the underlying premise is that companies know the training these professionals need. I think that is the larger issue. While it is not as bad as it used to be, I still see plenty of IT jobs advertising a preference for computer science degrees, for example. That is the problem: companies don't what they don't know and it makes it impossible for them to know what their staff and management needs to know.