To make sure employees comply with security policies and procedures, follow these best practices:

1. **Write understandable documents**: Tailor the documents to the size and nature of the company, using language and formats that employees are familiar with.

2. **Review and approval**: Send documents for review to relevant personnel and ensure they are approved by an authorized person to gain commitment and authority.

3. **Training**: Train employees on new activities or technologies defined by the documents to prevent incorrect actions or avoidance.

4. **Awareness**: Make employees aware of the importance of these documents to prevent negative attitudes.

5. **Regular updates**: Update documents regularly to ensure they remain relevant and are not disregarded.

6. **Integration into systems**: Integrate rules into the Quality Management System and conduct regular training and updates to keep employees informed and compliant.

7. **Foster a culture of awareness**: Encourage employees to report vulnerabilities and contribute to continuous improvement.

8. **Compliance review process**: Set up a process for compliance review, including defining how, by whom, and how often reviews should be conducted, and document these processes.

By implementing these practices, you can enhance compliance with security policies and procedures.