Marene Allison explains why heavy security controls early on break business workflows and damage partnerships. Her approach: the "3 Cups of Tea" method. First meeting breaks the ice, second shows you're helpful, third moves to real collaboration with non-IT stakeholders.
Yeah, excellent. So in that, in that same vein, we see a lot of information classification, or what we've shortened as info class. So if you're putting these controls and heavy things up front, there's a high chance you're gonna break business process and then lose some of those allies that you may have worked hard to create. So any advice on how to create the alignment or the partnerships with the non-IT or non-security function?
Yeah, go talk to them. It's really easy. Go buy them a cup of tea. You know, and I have a little program, people who know me, I call it 3 Cups of Tea. And, you know, the first time you go and they're not even talking to you, they like talk to the hand. The second time you're there, you know, you can start to have a conversation. They think you might be their help desk. And they, you know, like, hey, do you know how to do this on the computer? And then by the third time, you're talking strategy.
