Putvinski featured on Corporate Compliance Insights

Information Security Best Practices:

How Strong is Your Information Security Program?

by Matthew J. Putvinski, CPA, CISA, CISSP

The goal of this series is to give you the opportunity to challenge your organization to prove that it is truly doing everything possible to protect customer data.

The basics:

- How strong are your security policies and procedures?

- What type of security tools are you using to monitor security?

- Should you be using encryption?

- Do you know which of your vendors could cause you the most pain?

- How effective is your information security awareness training and do your employees understand why it’s important?

- What does the role of a chief security officer really look like?

- Do you have an effective risk assessment program?

- Are you prepared to adequately respond to an incident?

When you’re able to answer these questions effectively you can be assured you have a strong information security program. If you act as if it’s a matter of when you have a breach rather than if you have a breach, you may never have to deal with the consequences in the first place.

Read more from this series on Corporate Compliance Insights.