What can we do if security rules and procedures aren’t being followed?

1. Establish the causes, find solutions and put them into practice. The list of options in Table 1 above can be used as a guide.

2. If the problem is intentional and only involves one individual, try to...

• engage in a dialogue with the person to establish the cause(s) or motive;
  
• work with the individual’s whole team (this can sometimes be inappropriate, depending on the case);
  
• apply a notice or warning system, so that the person is fully aware of the problem;
  
• use a system of gradual sanctions which could culminate in the person being sacked.
  

3. Include a clause about observing security rules and procedures in all work contracts, in order for all staff to be fully aware of how important this is to the organisation.