Resources To Add To Your Business Data Privacy

Happy Data Privacy Day! We are seeing a lot of our Ontario Business Community taking the opportunity to make upgrades to their privacy playbook. In honor of today we wanted to provide some resources for those that want know how their business stacks up in terms of keeping their data protected. Or perhaps your just getting started on your cyber journey and need a template for how to implement some basic security. 

The Plan

Start with an assessment of where you stand today - ask some questions with your team and rate yourself from 0 to 10 . Zero being you are not currently doing anything to secure date and 10 being you have several things in place to secure data from, zero trust network, MFA Protection, Acceptable Use Policy that your teams knows and adheres to. Here are some Questions you can use;

1.  You have user credentials Password protected, each user has their own log in and has access to information based on their role in the business and nothing outside of that?

2.You have email filtering and zero- trust in place?

3. You have an acceptable use policy that includes; a list of safe programs and that is monitored upheld by your team? A Bring Your Own Device Policy? a Network Security Policy to protect the businesses sensitive data and prohibits the sharing of client, employee and business information?

4. Do you have access controls and least privilege in place?

5. Do you have a plan in place to store, share and dispose of sensitive information- do you use encryption when sending emails that contain personal data? 

6. Do you have a training plan in place for staff so they feel confident in how they can protect the business?

Based on the answers you will have a starting point on where your business has some gaps that could cause a data leak. 

Next set a due date for when you want to make changes, if you begin with documentation you can then add software around those policies to further protect the business. Create or use a check list like https://www.canada.ca/en/government/system/digital-government/digital-privacy-playbook/privacy-guidance-checklist.html and try to audit your progress regularly. Make sure you have the support of your IT Team and HR department and take a top down approach when implementing changes in the business. You can always start with an audit from an outside IT Firm and use their recommendations to make improvements. Call a trusted advisor as a consultant to assist through out your process. You can always call our team for further support at 416-900-6047 ext 322.