Many organisations find it difficult to persuade employees to comply with security policies. This presentation examines the reasons for employees ignoring policies and taking shortcuts, and outlines viable strategies for improving employee behaviour.