| Generally the problem with small business owners and | | | | about what you can do in beginning a protection plan |
| risk management, specifically in the area of ID Theft | | | | is to start with the FTC's guide for your business. |
| is that the small business owner thinks small. They | | | | Here are three simple things to start with. |
| feel because they have a small business certain laws | | | | 1. Take Stock. Know what personal information you |
| only apply to the larger business. As a small business | | | | have in your files and on your computers. Inventory |
| owner you should be concerned about some of | | | | all computers, laptops, flash drives, disks, home |
| these facts. Over 150 million data files have been | | | | computers and all other equipment to find out where |
| breached from organizations with many of those | | | | your company stores sensitive data. |
| being small businesses. | | | | 2. Lock it. Store paper documents or files as well as |
| CIO Magazine, The Coming Pandemic, by Michael | | | | CD's, floppy disks, zip drives, tapes and backups |
| Freidenberg, May 15 2006 says "If you experience a | | | | containing personally identifiable information in a |
| security breach, 20 percent of your affected | | | | locked room or in a locked file cabinet. Limit access |
| customer base will no longer do business with you, | | | | to employees with a legitimate business need. |
| 40 percent will consider ending the relationship and 5 | | | | 3. Pitch it. Properly dispose of what you no longer |
| percent will be hiring lawyers". That's a potential 65 | | | | need. Implement information disposal practices that |
| percent business loss with possible class action | | | | are reasonable and appropriate to prevent |
| lawsuits. Are you getting concerned yet? Shouldn't it | | | | unauthorized access to - or use of- personally |
| be your responsibility to protect your clients personal | | | | identifying information. Reasonable measures for your |
| information. They've entrusted you with it and now it | | | | operation are based on the sensitivity of the |
| should be your obligation to protect it. Even if you | | | | information, the costs and benefits of different |
| don't feel like it is, the Federal Government is making | | | | disposal methods and changes in technology. |
| sure you do. | | | | These three simple steps can get you on a great |
| It doesn't matter the type of business you own, the | | | | start. There's definitely a whole lot more you need to |
| information you collect, names, addresses, social | | | | do but understanding some simple steps can get you |
| security numbers, credit card numbers or other | | | | on the right path to your businesses awareness of |
| account numbers about students, employees, | | | | this international crime. Stop thinking like a small |
| business partners, contractors, or patients. Their | | | | business owner, take responsibility and when your |
| information lost by you and into the wrong hands can | | | | clients and employees see you care about their |
| put everyone at ID theft fraud. Certainly the type of | | | | personal information your business will take on the |
| compromised information will affect the type of | | | | dynamics of big business. |
| potential damage. A great start to learning more | | | | |