The article explores how employees play a crucial role in information security at organizations. Employees can pose risks but also contribute to a safe environment. The study looked at how employees view information security, ways to improve their performance, and how organizations manage security. The research found that employees often lack proactive security actions and are not very concerned about security in their daily tasks. Managers see employees as a threat, while employees see themselves as a valuable resource. Technological solutions and organizational aspects influence individual security performance. Measures like requirements for behavior have limited impact, but education and training with interactive communication are more effective. Employee participation is key to improving security performance, but it is not widely utilized.