Data security best practices every small business should follow

Small businesses take heed: Some hackers are using small businesses as an entry point to larger companies.

For example, the successful attack on Target was through an HVAC company. It’s no longer just about your own data security. Today, small businesses must also be able to placate their new business prospects, clients and customers’ security concerns by demonstrating their own security.

What are potential security holes that small businesses should consider? And how can a service-based small business shore up those holes?

Part of the answer is “technology.”

But it’s equally about the business practices, like identifying relevant compliance requirements, ensuring you have the expertise — either in-house or from an outside firm — and communicating all of this to your customers and prospects.
 

• Help you map out your current IT environment (systems, devices, applications, etc.)
• Determine what security areas and levels are mandated for your industry and activities.
• Identify the areas of potential security risk, e.g., on-site, remote, mobile and cloud systems and services.
• Recommend appropriate security software, services and settings; help you with purchasing and any installing, integration and configuration.
• Help with employee training, and fulfilling any regulatory reporting requirements.
• Be available to help in the event of data breaches or other security “events.”