J. M. Smith asked:
If you own a business ask yourself some simple questions concerning ID theft and your business.
1. How do you keep up with the new ID theft laws?
2. Are you even concerned about these laws?
3. Who is your security officer?
4. What training do you provide in ID theft for your employees?
5. Do you know what civil and criminal liability you could face?
6. If your business experienced a breached what would be your next step?
7. Are you aware of FACTA, GLB, & your States privacy notification law?
8. What are your vendors doing with your customer information?
9. IF your vendor experiences a breach who will be responsible?
10. Do you have an ID theft policy and procedure in place?
I could go on for ever. I think you understand that the way you did business just a few years ago is drastically changing when concerning ID Theft and the protection of NPI (Non-Public Information). Whether your a small business or large business, 1 employee or 1,000 you should have some type of breach plan in place.
Your business should have an assessment done and you should have frequent training to your employees and ISO if you have one. Why should you do this? Because the Federal Government not only says so but it’s the right thing to do. You can drive without car insurance but State laws require insurance. It’s the protection for yourself and other drivers.
Bottom line is that you have worked to hard to build your business. It provides for you a living and also provides for your employees. At the same time it can face some severe penalties if your business faced a breach of information. Just look at what’s happening to major companies out there that have had ID theft breaches. The difference with them and your business is that you may not have the capital to recover from legal action against you let alone the possible action from the FTC if they called. Should it not be your responsibility to protect your customers information? They trust in you when they hand over credit card information or other personal information you need to do business. What about your employees information? Their social numbers, banking information, drivers license numbers, their addresses. Does your HR person have all that on a laptop going home everyday? What about a flashdrive?
Take responsibility for your business and your clients. Everyone will benefit and you’ll gain trust faster with those clients and your employees. Offer your employees an ID theft protection plan, it shows your concern and not only that, it helps in your compliance plan.
Loretta
If you own a business ask yourself some simple questions concerning ID theft and your business.
1. How do you keep up with the new ID theft laws?
2. Are you even concerned about these laws?
3. Who is your security officer?
4. What training do you provide in ID theft for your employees?
5. Do you know what civil and criminal liability you could face?
6. If your business experienced a breached what would be your next step?
7. Are you aware of FACTA, GLB, & your States privacy notification law?
8. What are your vendors doing with your customer information?
9. IF your vendor experiences a breach who will be responsible?
10. Do you have an ID theft policy and procedure in place?
I could go on for ever. I think you understand that the way you did business just a few years ago is drastically changing when concerning ID Theft and the protection of NPI (Non-Public Information). Whether your a small business or large business, 1 employee or 1,000 you should have some type of breach plan in place.
Your business should have an assessment done and you should have frequent training to your employees and ISO if you have one. Why should you do this? Because the Federal Government not only says so but it’s the right thing to do. You can drive without car insurance but State laws require insurance. It’s the protection for yourself and other drivers.
Bottom line is that you have worked to hard to build your business. It provides for you a living and also provides for your employees. At the same time it can face some severe penalties if your business faced a breach of information. Just look at what’s happening to major companies out there that have had ID theft breaches. The difference with them and your business is that you may not have the capital to recover from legal action against you let alone the possible action from the FTC if they called. Should it not be your responsibility to protect your customers information? They trust in you when they hand over credit card information or other personal information you need to do business. What about your employees information? Their social numbers, banking information, drivers license numbers, their addresses. Does your HR person have all that on a laptop going home everyday? What about a flashdrive?
Take responsibility for your business and your clients. Everyone will benefit and you’ll gain trust faster with those clients and your employees. Offer your employees an ID theft protection plan, it shows your concern and not only that, it helps in your compliance plan.
Loretta
