What actions are considered violations of the security policy?
Violations include unauthorized access to sensitive information, failure to report security incidents, and non-compliance with training requirements.