How do you work with other teams to protect data?

This follows Policies & Procedures including: - roles & tasks associated - review & monitoring - company org - accountability

Built correctly, your data governance organization governs the privacy of the data. It can be helpful to have an Advisor role to help guide the organization through data privacy issues. If the company doesn't have a Data Privacy Officer, there is likely someone in Risk or Legal who can play this role. Data privacy is different from data security. Data security typically falls under the CTO because of the technical aspects of protecting the data from outside threats. The data governance organization should verify this is in place.

I think we need to add personal & employee feedback. Is it working compared to job role? Are the employees credible & accountable?

Understanding the data lineage in terms of external and internal sources will first help to assess the data to be dealt with. In this process, can assess the different teams involved and communicate them the overall vision of having a Data Governance process which focuses on securing the data from threats and risks. Document the findings and have a feedback loop opened to continuously improve the framework.

I think we are also forgetting the first step: Understand the business goals. All of data security needs to align with business operations & the business's goals down the line. I am a true believer in security by design based on business scalability & goals as well. Meaning you start a roadmap of security tasks that may align with your future business goals whether that is expansion (geographical, size etc) or adding new services...you get the point. Cybersecurity can align to all of that differently. We want security by design to align with your current & future objectives of the business to make sure your opportunity cost is the lowest & your prioritized are structured optimally.