Periodic assessments or reports on activities can be a valuable means of identifying areas of noncompliance, reminding employees of their responsibilities, and demonstrating management's commitment to the security program.
You can use assessment to find badly performing employees.