Protect the confidentiality, integrity, and availability of the personal information you collect and maintain.
Only 14% of small businesses rate their ability to mitigate cyber risks, vulnerabilities, and attacks as highly effective.
A WISP, or Written Information Security Program, is the document by which an entity spells out the administrative, technical, and physical safeguards by which it protects the privacy of the personally identifiable information it stores.
Increasingly, state laws are expanding privacy requirements beyond the worlds of healthcare and finance to require the safeguarding of personal information about any resident of the state.
A good information security program should include the following components:
- Acceptable Use Policy
- Business Continuity Plan
- Disaster Recovery Plan
- Data Classification Policy
- Incident Response Policy
- Security Awareness Policy
- Vendor Management Program