What is Security Culture?
A security culture is a set of customs shared by a community whose members may be targeted by the government, designed to minimize risk.
The central principle of all security culture, the point that cannot be emphasized enough, is that people should never be privy to any sensitive information they do not need to know.
Full text on CRIMETHINC here
