1. Discuss how the levels of authorized access should be outlined and training should be provided for the secure use of information systems.

2. Explain how organizations are required by law to protect employee information that is sensitive or personal.

3. Explain why an organization should integrate the security awareness education into a new hire's job orientation and make it part of every employee's on-the-job security training.