The link above points to a recent article published by Alan Heyman Managing Director of Cyber Security Auditors & Administrators (CSA2) concerning the growing maze of regulations regarding data privacy and security.
Alan highlights how the Massachusetts law reaches beyond their border to include any company outside of Massachusetts regardless of them being public, private, professional or not-for-profit that maintains personal information of a Massachusetts resident.
The direction all companies should be taking as a first step is to create a Written Information Security Plan (WISP). A WISP plan must include administrative, technical and physical safeguards that are designed to meet the objectives of the regulators.
I invite you to read Alan’s full article, then contact Dolvin Consulting to see how we can help you connect with the resources you need to safeguard your information and sleep better.
No comments:
Post a Comment