J. M. Smith asked:
Generally the problem with small business owners and risk management, specifically in the area of ID Theft is that the small business owner thinks small. They feel because they have a small business certain laws only apply to the larger business. As a small business owner you should be concerned about some of these facts. Over 150 million data files have been breached from organizations with many of those being small businesses.
CIO Magazine, The Coming Pandemic, by Michael Freidenberg, May 15 2006 says “If you experience a security breach, 20 percent of your affected customer base will no longer do business with you, 40 percent will consider ending the relationship and 5 percent will be hiring lawyers”. That’s a potential 65 percent business loss with possible class action lawsuits. Are you getting concerned yet? Shouldn’t it be your responsibility to protect your clients personal information. They’ve entrusted you with it and now it should be your obligation to protect it. Even if you don’t feel like it is, the Federal Government is making sure you do.
It doesn’t matter the type of business you own, the information you collect, names, addresses, social security numbers, credit card numbers or other account numbers about students, employees, business partners, contractors, or patients. Their information lost by you and into the wrong hands can put everyone at ID theft fraud. Certainly the type of compromised information will affect the type of potential damage. A great start to learning more about what you can do in beginning a protection plan is to start with the FTC’s guide for your business.
Here are three simple things to start with.
1. Take Stock. Know what personal information you have in your files and on your computers. Inventory all computers, laptops, flash drives, disks, home computers and all other equipment to find out where your company stores sensitive data.
2. Lock it. Store paper documents or files as well as CD’s, floppy disks, zip drives, tapes and backups containing personally identifiable information in a locked room or in a locked file cabinet. Limit access to employees with a legitimate business need.
3. Pitch it. Properly dispose of what you no longer need. Implement information disposal practices that are reasonable and appropriate to prevent unauthorized access to – or use of- personally identifying information. Reasonable measures for your operation are based on the sensitivity of the information, the costs and benefits of different disposal methods and changes in technology.
These three simple steps can get you on a great start. There’s definitely a whole lot more you need to do but understanding some simple steps can get you on the right path to your businesses awareness of this international crime. Stop thinking like a small business owner, take responsibility and when your clients and employees see you care about their personal information your business will take on the dynamics of big business.
Jeff
Generally the problem with small business owners and risk management, specifically in the area of ID Theft is that the small business owner thinks small. They feel because they have a small business certain laws only apply to the larger business. As a small business owner you should be concerned about some of these facts. Over 150 million data files have been breached from organizations with many of those being small businesses.
CIO Magazine, The Coming Pandemic, by Michael Freidenberg, May 15 2006 says “If you experience a security breach, 20 percent of your affected customer base will no longer do business with you, 40 percent will consider ending the relationship and 5 percent will be hiring lawyers”. That’s a potential 65 percent business loss with possible class action lawsuits. Are you getting concerned yet? Shouldn’t it be your responsibility to protect your clients personal information. They’ve entrusted you with it and now it should be your obligation to protect it. Even if you don’t feel like it is, the Federal Government is making sure you do.
It doesn’t matter the type of business you own, the information you collect, names, addresses, social security numbers, credit card numbers or other account numbers about students, employees, business partners, contractors, or patients. Their information lost by you and into the wrong hands can put everyone at ID theft fraud. Certainly the type of compromised information will affect the type of potential damage. A great start to learning more about what you can do in beginning a protection plan is to start with the FTC’s guide for your business.
Here are three simple things to start with.
1. Take Stock. Know what personal information you have in your files and on your computers. Inventory all computers, laptops, flash drives, disks, home computers and all other equipment to find out where your company stores sensitive data.
2. Lock it. Store paper documents or files as well as CD’s, floppy disks, zip drives, tapes and backups containing personally identifiable information in a locked room or in a locked file cabinet. Limit access to employees with a legitimate business need.
3. Pitch it. Properly dispose of what you no longer need. Implement information disposal practices that are reasonable and appropriate to prevent unauthorized access to – or use of- personally identifying information. Reasonable measures for your operation are based on the sensitivity of the information, the costs and benefits of different disposal methods and changes in technology.
These three simple steps can get you on a great start. There’s definitely a whole lot more you need to do but understanding some simple steps can get you on the right path to your businesses awareness of this international crime. Stop thinking like a small business owner, take responsibility and when your clients and employees see you care about their personal information your business will take on the dynamics of big business.
Jeff













