Data classification defines how sensitive information should be handled, but most organizations skip teaching employees what public, low, medium, and high sensitivity actually mean. Without change management that maps each department's workflows and builds support, even the best tools fail to stick.
So organizational change management is an easy-to-skip step. And a good example would be if your company has information or data classification, which boiled down to its most simple form is a very simple method for understanding what is public, what is low sensitivity, medium, high, regardless of how many levels you want, the fewer, the fewer the better. But That is really teaching how to understand the data that they're handling in their day-to-day world and understand what tools you've made available to them or what manual processes they need to do to protect that information, whether they're sending it to a third party, whether they're interacting cross-functionally within departments, or whether they're interacting, you know, in and out of databases and downloading files locally and all of that. So That's a really good example of like, that's not something you can get out of a software as a service tool that will just explain it, 'cause it's specific to your organization. It's specific to how individuals are working within departments, how they're handling their data. And OCM really, if you're doing it right, you're getting into those local departments, you're understanding what they do today, what they need to do going forward, kind of the change elements that you'll need to to push and then building their support for it and making it sustainable after whatever tool that you launch or whatever policy that comes out. So that, that's in a nutshell, like it's all of the soft skills, all the processes, and all of the job aids and, and materials that you put around a change that you're trying to drive.
