ABSTRACT
To answer this question we must first answer the question,
“How are security and culture linked?” The answer to that
question lies not in what we know but in what we do not
know. Although we take it for granted that security is an
indelible part of individual and organizational life, the
definition and extent of its need vary greatly across any
population of people and organizations. After all, if it is
simply “common sense” to ensure security, of what use is
the answer to the question? We should simply implement
as much security as we possibly can and consider the job
done. Of course, such a simplistic application of common
sense could lead an organization into excessive spending
and crippling constraints on employee productivity.