Achieving a strong security system

What role do the employees of an organization play in achieving a strong security system? How can one keep an organization operational when disaster strikes?