SECURITY POLICIES often seem to be set very strict & in a highly LEGAL manner to untrained users. And users are actually correct -- as controls must be set to encourage TECH hardness & human safety Users are not cybersecurity experts & often see these as overbearing. What do mean by "devices are for business use only? I've got to check my Facebook page & SMS texts every 5 minutes" - lol Most companies actually allow limited personal use, as that policy keeps company safe + users focus on work productivity, leading to good annual reviews Poor CHG MGT on new security changes can also create bad 1st impressions. Instead, SECURITY team can send out advance CHG MGT, DOC & Training. Users, who are well-informed in security are an ASSET :)

Earning trust with non-technical stakeholders about new cybersecurity practices is all about clear communication and showing value. Here’s how: 1. Avoid jargon—explain risks and solutions in plain language. 2. Highlight how the practices protect *them* (e.g., data, reputation, compliance). 3. Share stories of similar organizations that benefited from these practices. 4. Ask for their input and address their concerns—it’s a team effort. 5. Start small, demonstrate success, and build confidence over time.

Build trust by aligning cybersecurity goals with business objectives. Use clear, jargon-free language to explain risks and solutions. Demonstrate transparency through regular updates, real-world examples, and metrics that show progress. Engage stakeholders early by incorporating their concerns into security decisions. Foster a culture of collaboration, emphasizing that cybersecurity is a shared responsibility. Most importantly, show how security measures enable, rather than hinder, business growth and innovation.

Introducing new cybersecurity practices to non-technical stakeholders requires building trust and clear communication. Here’s what we may consider to achieve the success: 1) Explain Risks Simply: Describe threats in terms of business impact (e.g., revenue, reputation). 2) Highlight Benefits: Show how the practices protect the organization and reduce risk. 3) Cite Standards: Reference trusted frameworks like NIST or ISO to prove credibility. 4) Share Real Examples: Use case studies to demonstrate the consequences of poor cybersecurity. 5) Involve Stakeholders: Make them part of the solution with actionable insights. 6) Provide Updates: Offer clear, understandable reports on progress.

La alineación organizacional encaminada a el cumplimiento de los objetivos estrategicos genera un puente para comunicar y para afianzar en las personas sin conocimiento técnicos la importancia de la inclusión de nuevas prácticas en la organización buscando el cuidado de los activos de información de la misma.