IT Security Series Part 1: Information Security Best Practices

by Matthew Putvinski — Chief Information Security Officer at Wolf and Company

Lack of a documented security policy is a huge red flag when determining liability in the event of an incident. You do not know when the next attack will happen and if someone is aggressively targeting you, they will cause pain. When it comes time to defend yourself, no matter the strength of your security environment, the lack of a documented information security program is a message that management has not taken data security seriously. This perception becomes increasingly dangerous when we’re talking about a court of law and an untold number of potential customers in the court of public opinion.

Whether you are currently without a policy or want to ascertain where yours fits along the continuum, here are key components that should be in a best practices Information Security Program.