I've recently been driving a policy at my workplace that if you find a PC unlocked, you send out an email blast promising donuts (also copying in the victim). T

I've recently been driving a policy at my workplace that if you find a PC unlocked, you send out an email blast promising donuts (also copying in the victim). The victim then has a choice: admit to a security breach and have to sit through a training session, or follow through with donuts. This incentivises reporting, and disincentivises leaving your computer unlocked through social, economic and experiental means