Cybersecurity - Is Your Data Safe?
Print this Article | Send to Colleague
Are you keeping your data and those of your client’s safe? Cybersecurity is an important part of safeguarding the intellectual property and personal information of our clients. Data breaches occur all the time and no company or person is immune to this insidious threat. It could be a hacker that has gained entry to your server or a disgruntled employee who used a thumb drive to gain access to sensitive materials.
Is your company familiar with the data security breach laws adopted by the United States? These laws have a much broader scope than the privacy laws with which most are familiar. They govern any entity that holds personal information of a person, from any state, which the company or the client association does business.
Generally, the security breach laws require that companies conduct a reasonable and prompt investigation into any breach, or suspected breach and that they notify all affected individuals and the state government. Regulations do vary by state and some states do not have to be notified if the breach only affects encrypted data. Organizations should know the laws of their state and which ones apply to them or that of their association clients.
The following steps will help to ensure the safety of data:
Audit – A company should review its security practices and how it collects, stores, shares and uses personal and proprietary information. A rigorous assessment of risks and vulnerabilities should be undertaken.
Implement – Once the audit is complete, the next step is to implement a security and privacy plan that complies with the law. This will limit your exposure to breaches. It is important to educate employees so they are familiar and can comply. Also important is to make sure you update the plan when new technologies occur and when laws change.
Mitigate - Prepare a risk mitigation plan for data and security breaches and make certain to implement it immediately should a breach occur.
Safeguard the intellectual property and personal information of your company and your clients by becoming familiar with the Data Security and Breach Laws.
