ABSTRACT
As stated previously, publishing a set of policies and procedures is no assurance that anyone will ever read them. Creating an employee awareness program is really necessary to bring the security message home to the employees. Before an organization can accept a security program, however, the employees must first understand why the program is necessary and what they will gain from its implementation.
