People-Centric Security is an enormous improvement over threat-centric perspectives that treat human beings primarily as dangers to be mitigated. Security culture reflects the beliefs and values of the people that make up your organization. Security community needs to get better at doing it in so that we can leverage the value of our organizations’ human capital to make security more robust at all enterprise levels. The result isn’t a “score” or a determination of “high/low” or “good/bad” culture, but a snapshot showing how strong certain security values and priorities are.”]