may be generally aware that using passwords is a necessary precaution but may not know that the organization requires
that passwords be changed periodically or that they need to be of a certain length and character composition. Hence, we
conceptualize that information security awareness consists of general information security awareness, along with information security apolicy awareness.