People at the heart of building a strong security culture