Reasons for non-compliance with mandatory information assurance policies by a trained population