How can an organization ensure that its security policies are implemented?

What will be an ideal response?

To ensure its security policies are implemented, an organization should hold regular security-awareness training sessions for its employees as well as contractors and business partners. However, training by itself is not sufficient and must be supplemented with a regular review of the policies and their implementation. These reviews have many names, but a common one is the policy compliance audit.