...are found to have taken data and the HR department will have an easier time of dealing with these employees if you can provethey are fully aware of the policies and have taken part in the awareness training. Peter Bassill, CISSP, CITP, group...
http://www.computerweekly.com/235606.htm