In reality, breaches can just as commonly occur as a result of human error from inside the organisation. These usually result from a lack of training and understanding. This could be through the loss or theft of laptops, tablets, portable drives or work mobile phones. A common mistake is emailing information to the wrong address or posting it where it can be seen by the general public on the internet. In addition there are poor disposal procedures, especially for paper records where they are just thrown in the general rubbish rather than securely shredded. Old office equipment such a filing cabinets have been disposed off with the files still in them!
So top tips for keeping your data safe
- Ensure you have adequate passwords on your files and change them frequently.
- Limit personal information access to those who need it to do their jobs.
- Set up systems to ensure that database contents cannot be sent via email.
- Ensure that there is adequate training in place to support your staff.
- When disposing of old paper files, ensure they are shredded by a reputable company.
- When disposing of old office equipment, make sure that there is no personal information in it.
- Have a process in place to effectively deal with any breaches or compromises that occur.
No comments:
Post a Comment