Effectively managing security is no accident. Smart companies consider security upfront, assess their options and make good business choices based on the nature of their business and the sensitivity of the information involved. It is essential to focus on the fundamentals of sound security as the FTC outlined in Protecting Personal Information: A Guide for Business. It is important to know the personal information you have in your files and on your computers, and you only store what you need for your business. You should have a plan for how you will protect your information stored, how to properly dispose of information and have a incident response plan in the event of a breach. The FTC has resources including an online tutorial to help you think through how those principles apply to your business.

Read more