premise: Periodic assessments or reports on activities can be a valuable means of identifying areas of noncompliance, reminding employees of their responsibilities, and demonstrating management's commitment to the security program.
hypothesis: The employees all comply regardless of reports.