Despite a high incidence of employee theft, a review of the pertinent literature has revealed that security managers in the corporate environment are not communicating security awareness to employees. The author argues that, first, an effective corporate security policy is a fundamental component of proactive security management and, second, that the security policy should be communicated to employees via security awareness programs offered throughout the organization. The definition of security awareness is derived from the literature and the range, purpose, and objectives of security awareness programs are discussed. The requirements for security awareness programs generally include the two related components of awareness and training, where awareness involves the education of employees regarding security policies and the training involves a more in-depth level of understanding. The author reviews the impediments to the effective implementation of security awareness programs in corporate settings as well as effective implementation strategies for security awareness training programs. The article underscores the importance of also including suppliers and contractors within the security policy, at least insofar as to require an agreement providing for penalties if caught stealing. Bibliography