Security Guidance for Small Businesses and some other topics.

If you want to protect your business you need to be prepared. A Risk Assessment is key to understanding what you potential problem areas are.  The first step to do is gather an inventory which I covered here: https://securityguypro.blogspot.com/2023/07/inventory-your-business.html I could write even more about the processes but there are already some excellent resources available at the links below. https://www.ready.gov/risk-assessment https://www.epa.gov/risk https://www.hhs.gov/hipaa/for-professionals/security/guidance/guidance-risk-analysis/index.html https://www.youtube.com/watch?v=hNUBMLVr9z4 https://www.youtube.com/watch?v=61roNgguC1k https://www.youtube.com/watch?v=-E-jfcoR2W0 https://www.youtube.com/watch?v=fXbC_IFrhuE https://www.youtube.com/watch?v=5kDmCHZCPVw

 The start of getting a good grasp on your company's cybersecurity posture is to gather an inventory of your business. An example of why this is necessary is: I recently had a conversation with a business that had scanned copies of all the checks from transactions they did with customers. They had years worth of scans of these documents. If they were to have the data stolen, being they are in Texas, they would likely been liable for complying with the  Texas Identity Theft Enforcement and Protection Act (TITEPA) For TITEPA, if you fail to take reasonable action to comply with the breach notification requirements of the law, the Texas Attorney General may seek civil penalties from $2,000 to $50,000 per violation. In cases of unlawful data disposal, your business can be fined up to $500 for each record. If you think it will never happen to your company, check out this list from the TX AG office and click on the right hand most column to sort by date: https://oag.my.site.com/data...