Periodic assessments or reports on activities can be a valuable means of identifying areas of noncompliance, reminding employees of their responsibilities, and demonstrating management's commitment to the security program.
You can use assessment to find badly performing employees.
The employees all comply regardless of reports.