A strong security culture is both a mindset and mode of operation. One that’s integrated into day-to-day thinking and decision-making can make for a near-impenetrable operation. Conversely, a security culture that’s absent will facilitate uncertainty and, ultimately, lead to security incidents that we likely can’t afford to take on.
This often happens because everyone is literally working in silos. Rather than being helpful and doing what they can to truly improve security, these people are often doing what’s in their own best interests, sometimes even to sabotage each other or the overall business.