Sounds like you needed a change management officer or compliance responsible, or similar. They would know how to get people to see the benefits of security and

Sounds like you needed a change management officer or compliance responsible, or similar. They would know how to get people to see the benefits of security and keeping to process (without being pushy)