When it comes to building a security-first culture, a layered approach that takes physical security, security solutions and training into consideration is best.