Although these efforts were generally aimed at encouraging policy compliance , the senior security official at the retailing company emphasized the importance of improving users ' understanding of risks .
There were no efforts to encourage any policy compliance .