“You have to write something down to say— you can't — security culture change is not going to fall out on you.”

Transcript evidence from Chris Romeo -- AppSec Awareness: A Blue Print for Security Culture Change.