Michael Santarcangelo is discussing a security program in this article but his point could be applied elsewhere. An excerpt:
After listening, I asked a simple question, "Did you always follow the policy?" Her answer was expected: No, she didn't. So I asked her if she had an "aha" moment where it came clear and she changed her ways. She did. Then I asked if she had shared that moment with others. She had not.