If employees do not close the windows and doors after leaving a meeting, event, or training room or if confidential information is not removed from a whiteboard or flip chart, for example, this information could be seen by unauthorised persons. In general, employees should be provided with relevant rules to prevent such vulnerabilities from occurring. However, the specification of rules alone does not ensure they will be followed, nor does it ensure trouble-free operations. Many problems arise when rules are in place but employees are not aware of them. Employees often do not know, for example, that windows and doors must be locked after meetings or how they should deal with flip charts.