Here are some key aspects people need to implement, respect, and know when discussing security culture. One aspect would be risk awareness. Stop being in that camp that thinks it has nothing to hide. You need to understand the security risks faced by your organization. Still, as simple citizens, you need to protect information because no one will be responsible for your security. Usually, in institutions in Northern Virginia, there are IT departments or an IT manager, but he is responsible for everything from installing operating systems to security.