Information has become one of the most important assets for maintenance of organizations. The growing concern regarding the protection of these assets should be considered by the board of managers and by the company’s employees. This study aimed to identify the strategic balance between company’s prevention and response actions and adherence of employees to security policies in information security in a company of towed cars, located at Brazil. The qualitative research was conducted through an interview with the coordinator of IT and a quantitative approach was used through a questionnaire applied to 40 employees. The results show that the company’s policies and the employees’ intention to cooperate are in consonance. The company’s efforts to provide a robust information security is perceived and followed by its employees. A limitation of this work is its application in a company with headquarters in Brazil and mechanical metal branch.