Security Think Tank: Enable people using good security and risk methodology

How can organisations maintain usability and keep support costs low without compromising on security?