A security policy will be more accepted by employees if it is consistent and has the support of

Coworkers lack the formal authority to enforce policy compliance or impose consequences for violations, limiting their influence to informal peer pressure.

Executive management holds the organizational authority to require adherence to security policies across all departments, business units, and staff levels. When leadership visibly endorses a policy, it signals that compliance is a business priority and that non-compliance carries real consequences. This principle of top-down support is a foundational element of security governance frameworks such as NIST SP 800-12.

The security officer is responsible for drafting and administering policies, but without executive backing, the policy lacks the organization-wide authority needed for broad acceptance.

A supervisor has authority only over their direct reports and cannot provide the enterprise-wide mandate necessary for a security policy to be consistently accepted and followed.