When executive management does not place value on security or take responsibility for security (as if it were someone else's job), it sends a message to the people at the line level that management does not really care. In response, line-level people often lose interest in security as well.