One more post on the use of consequences as a way to enforce documented procedures - then we'll move on to the use of the carrot.
Here is a link to an article that offers an interesting idea. It highlights a technique to help enforce security related