Organizations are concerned about employees causing security breaches. Non-compliance with security policies is a major challenge. Employees play a big role in breaches. The article reviews challenges in implementing security policies and factors influencing employee behavior. Challenges include promoting security policies, non-compliance, managing policies, and shadow security. Factors influencing behavior are organizational and human. To improve compliance, continuous awareness and monitoring of employees are recommended.