Premise: Although monitoring, in itself, may encourage compliance with information security policies, the full benefits of monitoring are not achieved unless results are used to improve the security program.

Hypothesis: Information security policies were introduce last year and updated this year.
Relation: neutral