Premise: (2) evaluating the effectiveness of the security program in communicatingpolicies, raising awareness levels, and reducing incidents.

Hypothesis: The security levels are too high at the moment.
Relation: contradiction