premise: In addition, if the user was later involved in a security violation, the statement served as evidence that he or she had been informed of organizational policies.
hypothesis: The user had never been informed of policies of the organization.