Security depends upon people. That’s why security awareness is more important than compulsory enforcement or punishment to strengthen security capabilities. Education is very important for companies to enhance security awareness of their members. However, there have been few researches on the necessary education system or effective education methods. Many companies are providing security training on a mandatory and formal basis, which produced inconsistent results on the effectiveness of traditional security education. This study conducted a survey on employees of a single company to ensure maximum control over various factors that affect security awareness or policy compliance. Based on the survey results, this study empirically analyzed the impact of employee security awareness and security knowledge on their willingness to comply with security policies. The study found that both security awareness and knowledge had a significant impact on the willingness to comply with security policies, but security awareness was more influential than security knowledge. In addition, the higher the level of organizational commitment, the higher the awareness of security and the willingness to comply with security policies. Therefore, it would be necessary to focus more on raising awareness of the need and importance of security in the enterprise than on the delivery of knowledge.