To create a security-centric culture:
1. Provide regular security training and awareness programs to employees.
2. Encourage reporting of security incidents and concerns.