How to tackle the “blame culture” in cyber security

Are we too quick to point the finger and play the blame game after a breach? How is blame culture is undermining cyber security?