A good security awareness program makes employees aware of the behaviors expected of them. All security awareness programs have two enforcement components: the carrot and the stick. Which best captures the relationship of the two components?
The carrot aims to educate the employee about the importance of security policies, and the stick reminds the employees of the consequences of not following policy
