In addition , if the user was later involved in a security violation , the statement served as evidence that he or she had been informed of organizational policies .
The user had never been informed of policies of the organization .