Implementation of security measures. Building on the organisation’s security policies and procedures, Level 2 requires initial implementation of user training, background checking, server and workstation patching, and the implementation of asset management.