anchor: Although monitoring, in itself, may encourage compliance with information security policies, the full benefits of monitoring are not achieved unless results are used to improve the security program.
positive: The results need to be used in order to improve the security program.
negative: Compliance with information security policies is discouraged by monitoring.