Today's organizations rely heavily on information technology to conduct their daily activities. Therefore, their information security systems are an area of heightened security concern. As a result, organizations implement information security programs to address and mitigate that concern. However, even with the emphasis on information security, there has been a steady increase in information security violations. Therefore, the purpose of this quantitative survey study is to assess the factors that lead to an ineffective information program by investigating the relationship of an organization's awareness, enforcement, and maintenance of its information security policy program to its program's effectiveness. The study used a 5-point Likert scale survey instrument, which was administered through SurveyMonkey's online web portal using the SurveyMonkey Audience. The sample size for this study was 119 volunteers. These volunteers were asked question on their organization's information security program effectiveness, policy awareness, policy enforcement, and policy maintenance. This study employed multiple regression to predict values on the dependent or criterion variable level of information security program effectiveness from a set of independent predictor variables for the levels of information security policy awareness, enforcement, and maintenance. The independent variables total policy awareness, total policy enforcement, and total policy maintenance were found to be statistically significant predictors of the level of total program effectiveness. [The dissertation citations contained here are published with the permission of ProQuest LLC. Further reproduction is prohibited without permission. Copies of dissertations may be obtained by Telephone (800) 1-800-521-0600. Web page: http://www.proquest.com/en-US/products/dissertations/individuals.shtml.]