With human beings as the biggest risk to cyber security, an expert says businesses need to foster a company-wide culture of responsibility, from the CEO to the newest employee.