This data contains attributes relevant to the understanding of employee awareness and behavior related to IT security policies. Data was collected using a mono-quantitative method and the data that is uploaded contains a consent form, structured questionnaire and responses from 66 employees in the petroleum retail sector. The data collected assisted to identify areas where the use of IT security policies can be improved to better protect organizational data and systems as well as building an awareness model for the use of information technology security policies in the petroleum retail sector in South Africa.