In addition , many organizations required users to sign a statement that they had read and understood the organization 's information security policies .
Many groups made users sign a statement saying they refused to follow the laws .