All the ones that actually care about security do this. If you want people to fix their mistakes and change, you need to encourage them to do so. If you want p

All the ones that actually care about security do this. If you want people to fix their mistakes and change, you need to encourage them to do so. If you want people to try to hide their mistakes, punish them. (If you discover that IT has permanently reserved a backup laptop for a particular employee who is perpetually in need of a fresh image, it's time to talk to their manager about why they fall for these things and what other mistakes they might be making.)