premise: One security manager thought that requiring such signed statements served as a useful technique for impressing on the users the importance of understanding organizational policies.
hypothesis: Signed statements don't do anything and don't help the user comprehend anything. 