Although monitoring, in itself, may encourage compliance with information security policies, the full benefits of monitoring are not achieved unless results are used to improve the security program.
260010
The results need to be used in order to improve the security program.
260011
Compliance with information security policies is discouraged by monitoring.