The user had been briefed on organization policies numerous times before the statement was issued.
In addition, if the user was later involved in a security violation, the statement served as evidence that he or she had been informed of organizational policies.