✅ Comunicación clara → Explica los riesgos y beneficios de las medidas de seguridad en términos comprensibles para todos. ✅ Colaboración interdepartamental → Involucra a equipos no técnicos en la toma de decisiones para generar confianza. ✅ Cumplimiento normativo → Destaca la importancia de seguir regulaciones como ISO 27001 o GDPR para evitar sanciones. ✅ Capacitación en seguridad → Ofrece formación accesible para que todos comprendan su rol en la protección de datos. ✅ Soluciones equilibradas → Encuentra un punto medio entre seguridad y facilidad de uso para evitar resistencia.

From my experience, the data security is not a conflict for IT or non-IT teams, it is a group of mandatory policies created for the whole company, for all the impacted teams that could be all the company teams probably and each team must apply and know this policies and procedures. Firstly, I can suggest a global online training for each company team explaining at the high level the policies and procedures, and share the links with all the details. In parallel, the internal audit and the security team must monitor monthly that all of that policies and procedures are applying. If they discover any issue, a fix must be applied and required communications if it is necessary. Making an employee survey is also a good input.

Business Analysts, Data Privacy Specialists, and CIOs often speak the bridging language which cuts across IT and Business. Having a communication function within that space isn't a bad idea.

The clash between IT and non-IT teams over data security can be a significant hurdle. To harmonize these conflicts: - Foster open dialogue: Encourage regular communication between departments to understand each other's concerns. - Provide cross-training: Offer opportunities for non-IT staff to learn about data security basics and why they matter. - Establish clear policies: Create comprehensive but understandable data security guidelines that everyone can follow.

By creating a shared commitment to ethical data handling, I bridged IT and non-IT conflicts through transparent dialogue about why secure, responsible data practices protect everyone involved. Clear policies, regular training, and open communication turned security from an IT burden into a shared ethical mission, fostering trust and cooperation.