Although monitoring , in itself , may encourage compliance with information security policies , the full benefits of monitoring are not achieved unless results are used to improve the security program .
Information security policies were introduce last year and updated this year .