Have you had any recent security incidents that you are aware of?

According to the 2019 Data Breach Investigation Report, 43% of breaches involved the small and medium business segment. Gone are the days an internet firewall, PC antivirus, and backup is adequate. Agree? Today, in the face of emerging threats, security is complex.

Ransomware and phishing attacks can be let through by even the best anti-virus and anti-spam software. The risk is heightened if users have the same passwords across all accounts – successful attackers can then easy take your money and your files hostage. It is also very common for users to send confidential information unintentionally.

Governments and regulators are hard at work to create policy frameworks to guide business – yet staying up to date and onside with the patchwork of rules has its own challenges. PCI (Payment Card Industry Data Security Standard), GDPR (General Data Protection Regulation), PIPEDA (Personal Information Protection and Electronics Documents Act), HIPA (Health Insurance Portability and Accountability Act), FCRA (Fair Credit Reporting Act) all have some overlapping areas but varying objectives and severity of penalties.

The challenge for CEO/Presidents is that the type of risk and the preventive actions required are rapidly changing. Accountability for a cybersecurity breach sits at the top of the house and so should awareness of the threats and prioritisation of the defences. Here are four topics to be addressed:

1. What defences do we have in place against cyber threats?
2. How is our business data being protected from leaks?
3. Who has access to our information?
4. How are we compliant with the various regulatory frameworks?

If you have trouble answering one of these topics or if you have had an incident in the recent past, please reach out so that I can help point you in the correct direction.

Stephen Wise

Integration Professionals

Dramatically Improve Traction