... that appropriate changes and improvement actions are implemented as required. Information Technology (IT) Security Essential Body of Knowledge (EBK): A Competency and Functional Framework ... practices, and methods required to raise employee awareness about basic information security and train individuals with information security roles to increase their knowledge, skills, and abilities. ... appropriate level of protection for data Specify data and information classification, sensitivity, and need-to-know requirements by information type Create authentication and authorization...