Get users to subscribe to your code of conduct & policies

A code of conduct frames the activity of the organization, and defines the specific work rules and instructions for the organization.

A code of conduct encompasses the description of the organisation's activity, of what the organization represents and what it expects of its employees and possibly its partners (customers, suppliers, etc).

It determines the specific work rules and instructions for employees and possibly partners of the organization. In this way, employees know what they can or should not do.

The code of conduct is also useful for customers and suppliers. 

Include security in staff's development goals

The values of your organization need to include the values of security. You may consider including security in your staff's development goals.

Setting security objectives for every member of staff is a good way of making them take heed of the issue.