Security culture isn’t optional. Assume infiltration, compartmentalize intel, and never tolerate loose lips.