anchor: As discussed below, these efforts included testing controls, monitoring compliance with policies, analyzing security incidents, and accounting for procedural accomplishments and other indicators that efforts to promote awareness were effective.
positive: Accounting for procedural accomplishments and other indicators that efforts to promote awareness were effective, monitoring compliance with policies, analyzing security incidents, and testing controls, were all included in these efforts, as discussed below.
negative: As discussed below, these efforts included punishing employees for showing initiative.