To ensure employees comply with security policies and procedures, you can:

1. Conduct interviews with employees to assess their familiarity with the documentation and ask questions about key documents.
2. Look for evidence that employees are complying with the documented procedures.
3. Check records, meeting minutes, training attendance lists, and other evidence that policies are being reviewed and followed.
4. Write documents that make sense for employees, using language and formats they are accustomed to.
5. Send documents for review to several people in the company to get valuable input and commitment.
6. Ensure documents are approved by an authorized person to increase compliance likelihood.
7. Train employees on how to perform new activities or use new technology defined by the documents.
8. Make employees aware of the importance of these documents to avoid negative attitudes.
9. Regularly update the documents to prevent avoidance.