If the user visits your website directly (xxx.maps.arcgis.com), the search box returns matches of the public data in your organization only.
If the user visits arcgis.com, items that your organization has shared publicly will be matched, however, they will be mingled in the search results with everything else. There really isn't an easy way to just show the matches from a particular organization.
Thanks,
Mike