Security is the responsibility of every employee, and when they understand and accept this, they can shift their perception of IT as the bad guy.