Everyone in the organisation contributes to its security culture. Organizational culture has a direct impact on security. Even with the best security processes and tools, your organization will still be at risk if people have a poor attitude toward security.