Information security is a growing concern among various organizations and companies worldwide. Though organizations are generally focusing on external security threats but there could be substantial threats within the organization. This paper presents a detailed survey conducted on various organizations of Saudi Arabia to have a deep insight into how the issues of deterrence for the information security violation are dealt with within organizations. It focuses on the awareness and effectiveness of information security policies of the organization among its employees.