From compliance to resilience: people, culture and information security

The human is both an asset and a liability in information security. Our information security culture often views humans with deep suspicion. How can we move security from compliance to resilience?