Earlier in my career the biggest lesson I learned was infosec was first and foremost a culture problem. Similar to your experience, working with people individually, meeting them where they are, listening, understanding, guiding, and modeling a better mindset all helps given enough time.

There are cases where some of those people just aren’t willing to work with you. It’s still possible to change the culture around them by influencing it more than they do. For every belligerent person, you can find one or more advocates