Some allowance of rule breaking
Rule-breaking within an organization can actually increase awareness, argues Security Catalyst Michael Santarcangelo.
To make this work in a business setting, Santarcangelo suggests the following:
-Select the 'right' rule to break: find something that is not likely to cause damage while allowing individuals to get the experience necessary to understand the outcome (the consequences of their actions).
-Make it a special event (and not a routine): acknowledge that they get a shot to break a rule because they are respected, but that it comes with conditions (some structure).
-Engage in a conversation, not a lecture; learn from their experience and use it as a basis to reach a common understanding on the purpose of the rule.