Security professionals must first understand the social elements, including cultural and generational variances, that affect employee behavior and perceptions about security. In the geographic domain, a policy written for one audience may fail elsewhere if not fine-tuned for relevance. A policy created in this way is a tool that each member of the business unit can use in a manner consistent with the agreed-upon security protocol. The key to success is in the early transfer of responsibility to those engaged in making the business successful.”]
Source: https://www.csoonline.com/article/2123770/social-elements-of-security-policy-and-messaging.html