Mandates produce compliance at best and resentment at worst, but neither produces understanding. Leading with questions that build genuine comprehension creates people who make good security decisions when you're not in the room.
“Mandates get obedience. Questions get understanding.”