Successful implementation of information security policies starts before the policies

Successful implementation of information security policies starts before the policies are even written. Implementation depends on how well the policy is integrated into existing business processes, and how well it is understood and embraced by leadership and employees.

• Discuss/Explain how user apathy affects security policy implementation.
• Why is a change model important when important when implementing security policies?  Explain
• How does security policies within YOUR organization influence YOUR role, responsibilities & accountabilities?  Explain.

Length 1 and half page with at least two references with API