This paper emphasizes that an information security solution is a crucial element for any organization. One of the main challenges in integrating information security into an organization is the actions and behaviors of employees. For information security to become part of an organization’s corporate culture, the protection of information needs to be incorporated into the daily activities of employees and become second nature to them.