Security culture is a culture where the people know their rights and, more importantly, assert them. Those who belong to a security culture also know what behaviour compromises security and they are quick to educate those people who, out of ignorance, forgetfulness, or personal weakness, partake in insecure behaviour. This security consciousness becomes a culture when the group as a whole makes security violations socially and ethicly unacceptable in the group.
TakeDown.NET -> “Security-culture”