anchor: (2) evaluating the effectiveness of the security program in communicatingpolicies, raising awareness levels, and reducing incidents.
positive: The security program needs to be evaluated.
negative: The security levels are too high at the moment.