If staff don’t comply with the Information Security Policy, they may be subject to disciplinary action (in accordance with your Disciplinary procedure). In certain circumstances, depending on the severity of the situation, non-compliance may result in the dismissal of that person. This applies to all staff, including those who hold senior positions (eg directors).