Is a lack of organisational commitment to proactively prepare and execute effectively the difference between relative success and failure?How is this commitment one of the defining characteristics of a high-performance security culture?Which other characteristics translate into success factors and best practices?