I have been working in Data Security industry 10 years.
I work with the customer to understand requirement.
We work for win-win situation.
Give employees IT Security awareness training annually.
Always interact with customer there is futher clarification needed.
Always discuss with team on how to best tackle customer requirement.