3. Create Strict Password Protocols
Password protocols are an easy first step to improving an organization’s data security. These protocols encompass things like the frequency of password changes, the complexity requirements of the passwords, the number of password-protected programs, levels of access, etc. If you need to improve security, then the first step is to look at how your organization manages passwords. – Baruch Labunski, Rank Secure
4. Implement Two-Factor Authentication
Implementing a two-factor authentication process for email is simple to do and has helped cut down on our employee accounts being hacked. Education on email phishing scams has helped prevent suspicious emails being opened, which can allow for viruses access to our systems. Phishing emails can appear to come from within the company, but a little attention to details within the email can weed them out. – Jeff Pitta, Senior Market Advisors
5. Conduct Internal Phishing Tests to Identify Weak Links
I think the No. 1 risk to corporate security is human error. This boils down to phishing, spear phishing and social engineering. Basically, people fall for fake log-in screens or accidentally divulge passwords and other secure information. I run random automated tests on my team to identify weak links and then provide targeted training to those individuals. – Ryan D Matzner, Fueled
Restricting access to your most important data not only improves data security, but it also is a great approach when you are short on time and money. After you conduct a thorough evaluation of your important data, protect the most valuable composites by restricting access to them. Verify only those individuals that must have access to your most sensitive information. – Blair Thomas, eMerchantBroker
8. Reduce the Amount of Data You Store
The availability of cheap data storage leads most companies to hold on to all data they encounter, no matter the value. The amount of data a company needs to secure only continues to grow unless you can make choices about what data you need to keep. In particular, storing minimal personal data about users drops your security needs automatically, and it helps you avoid public relations nightmares about data breaches. – Thursday Bram, The Responsible Communication Style Guide
9. Always Run Software Updates
The majority of security breaches, malware infections and data thefts are avoidable. They’re almost always the result of security vulnerabilities in outdated software. If you want to keep your company and its customers safe, keep the software you depend on up to date, or use managed services that take care of patching and updates for you. – Vik Patel, Future Hosting
10. Hold Mandatory Training Sessions
Hold mandatory training for new employees and at least a bimonthly session to go over new threats. You can make it fun. Bring in specialists to talk about security news. The No. 1 thing is to make people feel that it’s important. – Nicole Munoz, Nicole Munoz Consulting Inc.
11. Install Security Plug-Ins for WordPress
This is such a simple and free option, and it amazes me that very few people do it. If you have a WordPress website, install a security plug-in such as iThemes Security or one of many others. This is free, will take five minutes and will protect your website from hackers who can potentially shut down your website or steal your customer data. – Brandon Stapper, Nonstop Signs
12. Have a Data Breach Plan in Place
The best offense is a good defense. Work with your attorney to develop a data breach plan and understand what the local laws are. If customer data is leaked, you are often obligated to tell them. It’s the right thing to do. Be sure you’re familiar with your own terms of service, and follow them carefully. Delete and encrypt customer information whenever possible. – Matt Wilson, Under30Experiences
13. Find a Good Password Management Tool
We use Passpack to share all of our passwords. No one shares passwords through another channel. We know who has access to which password, and we’re able to update them when the person leaves the company. LastPass is another tool we use for entering passwords automatically at logins. You can save your login credentials here and keep them protected once you log out. – Michael Hsu, DeepSky