anchor: In addition, many organizations required users to sign a statement that they had read and understood the organization's information security policies.
positive: Many groups made users sign a statement saying they agreed to the security policies.
negative: Many groups made users sign a statement saying they refused to follow the laws.