\r\n
\r\n\r\nYou don't need to look far to see the repercussions when a business fails to protect sensitive information. Equifax's recent data breach was a massive blow to its reputation and its stock.
\r\nData breaches and fraud are problems for businesses of every size, affecting over 25% of businesses with an average fraud loss of $38,000. That's enough to push many small businesses into bankruptcy.
\r\nAccording to the U.S. Government Accountability Office, more than 35,000 security incidents are reported annually to the Department of Homeland Security. The most common types of security incidents belong to email/phishing scams, device/computer hardware theft, and unauthorized users of the network.
\r\nHackers are responsible for the majority of information security breaches. Cybercriminals look for ways to make monetary gain from businesses by using malware and phishing scams to collect sensitive data. The cost to remedy a data breach can be astronomical. Large companies who have to deal with major data breaches have paid out millions to specialists to become compliant once again. According to IBM Security, the average cost of a data breach in the United States is $150 per record.
\r\nTo lower your risk and keep sensitive information safe, follow these essential security practices.
\r\n\r\nThe more information you collect about your customers and employees, the more you need to protect them. Companies often save more information than necessary, and their customers are the ones who suffer if a data breach occurs.
\r\nTo limit what hackers could steal, only save the information you absolutely need to run your business. Avoid collecting anything extra, and if you only need information temporarily, get rid of it properly after you've used it.
\r\nLaptops, smartphones, tablets and flash drives provide plenty of convenient ways to store and transfer information, but this also results in more opportunities for data to fall into the wrong hands.
\r\nKeep track of what information you're storing, where you store it and who has access to it. Make sure this information inventory includes both electronic files and physical documents with sensitive information.
\r\nThere are quite a few cybersecurity programs that can protect businesses of any size from malware and other threats. Look for a paid program that can secure your network and every device on it. The money you spend is well worth it, as a breach could cost you much more.
\r\nOnce you have your cybersecurity program in place, install all updates immediately. The Equifax breach, which affected 143 million people, occurred because, apparently, the company failed to update Apache Struts, according to sources who spoke to Bloomberg.
\r\nCyberattacks may be a more common threat, but lost or stolen documents can be just as bad. Whenever documents contain sensitive information, it's important to keep them safe from prying eyes.
\r\nStore documents in a locked file cabinet or room that only your most trusted employees can access. Dispose of documents by running them through a shredder.
\r\nFor business expenses, the best and most secure payment method is a business credit card. Most will have zero-liability fraud protection, and if you need to dispute a transaction, you won't be out any money during that process. You can set sending limits on employee cards and receive immediate notification of any transaction via text alerts.
\r\nAny payment method has its risks, but credit cards have the most safeguards and security features. Security isn't the only benefit of business credit cards, as they also provide detailed expense reports and the opportunity to maximize your travel rewards.
\r\nRegardless of how much you trust your employees, it's wise to use internal controls to limit your employee fraud risk. Otherwise, employees could misuse company funds or steal customer information.
\r\nLimit each employee's access to only the information they need for their job. Make sure your systems log what information each employee accesses. Set up segregation of duties to prevent any single employee from having too much responsibility. For example, instead of having one employee make purchases and go over expense reports, split those tasks among two employees.
\r\nYou always need to be prepared for a worst-case scenario. How you respond to security incidents can be the difference between a minor data loss and a costly breach. Your plan should include the following steps:
\r\nPreventable security issues have brought down many small businesses. Although you can't eliminate the possibility of data breaches or fraud, with the right security practices, you can reduce their likelihood and minimize the damage if one occurs.
\n","docType":"article","guid":"articles_be10db55d8beebf88b63e015b2a4469c","lastModified":"2020-04-07T13:31:00.000Z","published":"2017-10-04T07:00:00.000Z","structuredData":null,"subtitle":"Information security can make or break your business.","template":"v1","title":"7 Security Practices to Protect Your Business's Sensitive Information","type":"article","author":{"avatar":null,"bio":"The purpose of our community is to connect small business owners with experienced industry experts who can address their questions, offer direction, and share best practices.","name":"business.com editorial staff","image":null,"slug":null,"social":{"facebook":"","linkedin":"https://www.linkedin.com/company/business-com-/","twitter":"https://twitter.com/businessdotcom","website":"https://www.business.com/"},"status":"enabled","title":null,"type":"Old BDC Member","user":{"imagePath":"https://staging.business.com/images/uploads/user/profile/b14a2c1fa0158a2f46854597139a2067ee8ef.jpg","profile":{"company":"","jobTitle":"","website":"https://www.business.com/"}}},"breadcrumbs":null,"channels":{"primary":{"name":"Technology","slug":"technology"},"sub":{"name":"Security","slug":"security"}},"meta":{"robots":"index, follow","description":"You have a responsibility to your customers and your business to keep all sensitive data secure. Here are seven best practices to secure your information.","title":"7 Security Practices to Protect Your Business's Data - business.com"},"parsedContent":{"toc":[{"id":"types-of-security-risks-businesses-face","title":"Types of security risks businesses face"},{"id":"1-only-save-whats-necessary","title":"1. Only save what's necessary."},{"id":"2-keep-an-information-inventory","title":"2. Keep an information inventory."},{"id":"3-stay-up-to-date-with-your-cybersecurity","title":"3. Stay up to date with your cybersecurity. "},{"id":"4-store-physical-documents-securely","title":"4. Store physical documents securely."},{"id":"5-pay-for-expenses-with-a-business-credit-card","title":"5. Pay for expenses with a business credit card."},{"id":"6-set-internal-controls-to-guard-against-employee-fraud","title":"6. Set internal controls to guard against employee fraud. "},{"id":"7-plan-your-response-to-data-breaches","title":"7. Plan your response to data breaches."},{"id":"giving-your-business-maximum-protection","title":"Giving your business maximum protection"}],"json":[{"component":"ul","children":[{"component":"li","children":["Information security issues have a major impact on a business. Loss of revenue can result from remedying the problem and damage to your brand's image."]},{"component":"li","children":["The average cost of a data breach as of 2020 is $150 per record."]},{"component":"li","children":["Businesses are expected to remain proactive to prevent information security problems including routinely updating cybersecurity tools."]}]},{"component":"p","children":[{"component":"QtWidget","props":{"bdcQtWidget":"","qtPubId":"1000","qtOfferGroupId":"146","qtViewType":"single"}},{"component":"script","children":["window.bdcQtWidget.init();"]}]},{"component":"p","children":["You don't need to look far to see the repercussions when a business fails to protect sensitive information. Equifax's recent data breach was a ",{"component":"a","props":{"href":"https://www.nytimes.com/2020/01/22/business/equifax-breach-settlement.html","target":"_blank","rel":"noopener nofollow"},"children":["massive blow"]}," to its reputation and its stock."]},{"component":"p","children":["Data breaches and fraud are problems for businesses of every size, affecting over ",{"component":"a","props":{"href":"http://http-download.intuit.com/http.intuit/CMO/qbes/resources/pdfs/Intuit_Security_Whitepaper.pdf","target":"_blank","rel":"noopener nofollow"},"children":["25% of businesses "]},"with an average fraud loss of $38,000. That's enough to push many small businesses into bankruptcy."]},{"component":"h2","props":{"id":"types-of-security-risks-businesses-face"},"children":["Types of security risks businesses face"]},{"component":"p","children":["According to the ",{"component":"a","props":{"href":"https://www.gao.gov/key_issues/ensuring_security_federal_information_systems/issue_summary","target":"_blank","rel":"noopener nofollow"},"children":["U.S. Government Accountability Office"]},", more than 35,000 security incidents are reported annually to the Department of Homeland Security. The most common types of security incidents belong to email/phishing scams, device/computer hardware theft, and unauthorized users of the network."]},{"component":"p","children":["Hackers are responsible for the majority of information security breaches. Cybercriminals look for ways to make monetary gain from businesses by using malware and phishing scams to collect sensitive data. The cost to remedy a data breach can be astronomical. Large companies who have to deal with major data breaches have paid out millions to specialists to become compliant once again. According to ",{"component":"a","props":{"href":"https://databreachcalculator.mybluemix.net/","target":"_blank","rel":"noopener nofollow"},"children":["IBM Security"]},", the average cost of a data breach in the United States is $150 per record."]},{"component":"p","children":["To lower your risk and keep sensitive information safe, follow these essential security practices."]},{"component":"QtWidget","props":{"bdcQtWidget":"","qtPubId":"1000","qtOfferGroupId":"152"}},{"component":"script","children":["window.bdcQtWidget.init();"]},{"component":"h2","props":{"id":"1-only-save-whats-necessary"},"children":["1. Only save what's necessary."]},{"component":"p","children":["The more information you collect about your customers and employees, the more you need to protect them. Companies often save ",{"component":"a","props":{"href":"http://articles.latimes.com/2014/jan/30/business/la-fi-lazarus-20140131","target":"_blank","rel":"noopener nofollow"},"children":["more information than necessary"]},", and their customers are the ones who suffer if a data breach occurs."]},{"component":"p","children":["To limit what hackers could steal, only save the information you absolutely need to run your business. Avoid collecting anything extra, and if you only need information temporarily, get rid of it properly after you've used it."]},{"component":"h2","props":{"id":"2-keep-an-information-inventory"},"children":["2. Keep an information inventory."]},{"component":"p","children":["Laptops, smartphones, tablets and flash drives provide plenty of convenient ways to store and transfer information, but this also results in more opportunities for data to fall into the wrong hands. "]},{"component":"p","children":["Keep track of what information you're storing, where you store it and who has access to it. Make sure this information inventory includes both electronic files and physical documents with sensitive information. "]},{"component":"h2","props":{"id":"3-stay-up-to-date-with-your-cybersecurity"},"children":["3. Stay up to date with your cybersecurity. "]},{"component":"p","children":["There are quite a few cybersecurity programs that can protect businesses of any size from malware and other threats. Look for a paid program that can secure your network and every device on it. The money you spend is well worth it, as a breach could cost you much more."]},{"component":"p","children":["Once you have your cybersecurity program in place, install all updates immediately. The Equifax breach, which affected 143 million people, occurred because, apparently, the company ",{"component":"a","props":{"href":"https://www.scmagazine.com/apache-struts-vulnerability-led-to-earlier-breach-at-equifax/article/689863/","target":"_blank","rel":"noopener nofollow"},"children":["failed to update "]},"Apache Struts, according to sources who spoke to Bloomberg."]},{"component":"h2","props":{"id":"4-store-physical-documents-securely"},"children":["4. Store physical documents securely."]},{"component":"p","children":["Cyberattacks may be a more common threat, but lost or stolen documents can be just as bad. Whenever documents contain sensitive information, it's important to keep them safe from prying eyes."]},{"component":"p","children":["Store documents in a locked file cabinet or room that only your most trusted employees can access. Dispose of documents by running them through a shredder. "]},{"component":"h2","props":{"id":"5-pay-for-expenses-with-a-business-credit-card"},"children":["5. Pay for expenses with a business credit card."]},{"component":"p","children":["For business expenses, the best and most secure payment method is a business credit card. Most will have zero-liability fraud protection, and if you need to dispute a transaction, you won't be out any money during that process. You can set sending limits on employee cards and receive immediate notification of any transaction via text alerts. "]},{"component":"p","children":["Any payment method has its risks, but credit cards have the most safeguards and security features. Security isn't the only benefit of business credit cards, as they also provide detailed expense reports and the opportunity to maximize your ",{"component":"a","props":{"href":"https://www.rewardexpert.com/credit-cards/categories/best-travel-rewards-credit-cards","target":"_blank","rel":"noopener nofollow"},"children":["travel rewards"]},"."]},{"component":"h2","props":{"id":"6-set-internal-controls-to-guard-against-employee-fraud"},"children":["6. Set internal controls to guard against employee fraud. "]},{"component":"p","children":["Regardless of how much you trust your employees, it's wise to use internal controls to limit your employee fraud risk. Otherwise, employees could misuse company funds or steal customer information."]},{"component":"p","children":["Limit each employee's access to only the information they need for their job. Make sure your systems log what information each employee accesses. Set up segregation of duties to prevent any single employee from having too much responsibility. For example, instead of having one employee make purchases and go over expense reports, split those tasks among two employees. "]},{"component":"h2","props":{"id":"7-plan-your-response-to-data-breaches"},"children":["7. Plan your response to data breaches."]},{"component":"p","children":["You always need to be prepared for a worst-case scenario. How you respond to security incidents can be the difference between a minor data loss and a costly breach. Your plan should include the following steps:"]},{"component":"ul","children":[{"component":"li","children":[{"component":"strong","children":["Close any holes immediately."]}," Disconnect and shut down any compromised computers, and stop using any compromised programs.",{"component":"br"},{"component":"br"}]},{"component":"li","children":[{"component":"strong","children":["Notify the appropriate parties."]}," Depending on the information that was stolen, you may need to let customers and law enforcement know about it.",{"component":"br"},{"component":"br"}]},{"component":"li","children":[{"component":"strong","children":["Investigate what happened."]}," Conduct an internal review or hire an agency to find out what went wrong."]}]},{"component":"h2","props":{"id":"giving-your-business-maximum-protection"},"children":["Giving your business maximum protection"]},{"component":"p","children":["Preventable security issues have brought down many small businesses. Although you can't eliminate the possibility of data breaches or fraud, with the right security practices, you can reduce their likelihood and minimize the damage if one occurs."]}]},"resource":null,"sponsorship":{"sponsorType":"no-sponsor","name":null,"thumbnail":null,"bio":null,"slug":null,"status":null,"social":{"website":null,"linkedin":null,"twitter":null,"facebook":null}},"thumbnail":{"path":"https://staging.business.com/images/content/5e8/c83637b4374ce268b4577/1500-0-","caption":"andrei_r / Getty Images","isBlurred":false},"bestPicks":null},"related":{"relatedArticles":[{"title":"8 Important Cybersecurity Measures for Small Businesses","canonical":"https://www.business.com/articles/cybersecurity-measures-for-small-businesses/","slug":"cybersecurity-measures-for-small-businesses","thumbnail":"https://www.business.com/images/content/5dc/867c77b43740d048b4567/1500-0-","dek":"Data theft is still a major headache though massive strides are being made to curb this menace. Security starts with you.","lastModified":"2019-11-11T14:00:00Z","published":"2019-11-11T14:00:00Z","sponsored":false},{"title":"7 Simple Tips for Protecting Your Brand Against Cyberattacks","canonical":"https://www.business.com/articles/protect-your-brand-against-cyberattacks/","slug":"protect-your-brand-against-cyberattacks","thumbnail":"https://www.business.com/images/content/5df/81fd39c658a0f308b4567/1500-0-","dek":"Follow these tips to keep your business and your brand safe from cyberattacks.","lastModified":"2019-12-12T16:00:00Z","published":"2019-12-12T16:00:00Z","sponsored":false},{"title":"3 Ways to Protect Your Small Business From a Data Breach","canonical":"https://www.business.com/articles/small-business-data-breaches/","slug":"small-business-data-breaches","thumbnail":"https://www.business.com/images/content/5de/9626b9c658ad8648b456c/1500-0-","dek":"Cybersecurity should be a top priority for all businesses in 2020.","lastModified":"2019-12-06T15:00:00Z","published":"2019-12-06T15:00:00Z","sponsored":false},{"title":"Key Storage Trends and Challenges for SMBs in 2020","canonical":"https://www.business.com/articles/digital-storage-trends/","slug":"digital-storage-trends","thumbnail":"https://www.business.com/images/content/5e1/fbacb5a215e73658b4567/1500-0-","dek":"Find out why storage solutions that meet business needs, keep costs down and limit the complexity of the infrastructure will be a critical trend in 2020.","lastModified":"2020-01-16T17:00:00Z","published":"2020-01-16T17:00:00Z","sponsored":false},{"title":"Decoding the Hierarchy of Data Protection","canonical":"https://www.business.com/articles/data-protection-hierarchy/","slug":"data-protection-hierarchy","thumbnail":"https://www.business.com/images/content/5ad/e2b331039eba5148b456a/1500-0-","dek":"What are your options for protecting your data and how do you decide on a strategy?","lastModified":"2018-04-23T19:00:00Z","published":"2018-04-23T19:00:00Z","sponsored":false},{"title":"Is Cloud Hosting the Best IT Solution for Your Business?","canonical":"https://www.business.com/articles/is-cloud-best-for-your-business/","slug":"is-cloud-best-for-your-business","thumbnail":"https://www.business.com/images/content/5bd/b8a4e9c658aac498b4583/1500-0-","dek":"For SMBs, a cloud host could replace the need for IT staff.","lastModified":"2018-11-01T07:00:00Z","published":"2018-11-01T07:00:00Z","sponsored":false},{"title":"Is Cloud Document Management Safe?","canonical":"https://www.business.com/articles/cloud-document-management/","slug":"cloud-document-management","thumbnail":"https://www.business.com/images/content/5ee/0d0c17b4374ea128b458d/1500-0-","dek":"Cloud document management is a great option for easy document storage, but users often have concerns about security.","lastModified":"2020-06-10T12:44:00Z","published":"2020-06-10T12:44:00Z","sponsored":false},{"title":"Enterprises are Embracing Cloud Security","canonical":"https://www.business.com/articles/jamison-west-enterprises-embrace-cloud-security/","slug":"jamison-west-enterprises-embrace-cloud-security","thumbnail":"https://www.business.com/images/content/587/3ec0e3087b13207a26afb/1500-0-","dek":"Find out why and how the industry is evolving to maintain that interest.","lastModified":"2017-01-09T20:00:00Z","published":"2017-01-09T20:00:00Z","sponsored":false},{"title":"Your E-Commerce Data Security Checklist for 2020","canonical":"https://www.business.com/articles/ecommerce-data-security-checklist/","slug":"ecommerce-data-security-checklist","thumbnail":"https://www.business.com/images/content/5e8/22b9f7b4374651e8b456e/1500-0-","dek":"To protect your business from hackers and data theft – and to keep the customer trust you've worked hard to earn – make sure your company follows these 10 data security best practices.","lastModified":"2020-03-30T17:20:00Z","published":"2020-03-30T17:20:00Z","sponsored":false},{"title":"Prepare for the Worst: How to Create a Cyber Security Incident Response Plan","canonical":"https://www.business.com/articles/prepare-cyber-security-incident-response-plan/","slug":"prepare-cyber-security-incident-response-plan","thumbnail":"https://www.business.com/images/channel/technology.jpg","dek":"Effective CSIR Plan is an essential aspect of organizations in data governance strategy to make aware about current security readiness.","lastModified":"2016-01-13T19:00:00Z","published":"2016-01-13T19:00:00Z","sponsored":false},{"title":"Restaurant Security: A Guide to Getting Your Money's Worth","canonical":"https://www.business.com/articles/restaurant-security-guide/","slug":"restaurant-security-guide","thumbnail":"https://www.business.com/images/content/58a/dced22f87b17e076bf981/1500-0-","dek":"It's hard to determine the ROI you will get from increasing your restaurant security.","lastModified":"2017-02-21T08:00:00Z","published":"2017-02-21T08:00:00Z","sponsored":false},{"title":"How to Do a Cybersecurity Risk Assessment","canonical":"https://www.business.com/articles/cybersecurity-risk-assessment/","slug":"cybersecurity-risk-assessment","thumbnail":"https://www.business.com/images/content/5d2/2b53d5a215efd708b457a/1500-0-","dek":"Learn how to find the vulnerabilities and risks in your network before hackers do.","lastModified":"2019-08-09T13:30:00Z","published":"2019-08-09T13:30:00Z","sponsored":false}],"relatedReviews":[{"doc_type":"category","thumbnail":"https://staging.business.com/images/rz/5df908cc5a215e8c4a8b4568/conferencecall_Antonio_Diaz_Getty.jpg","canonical":"https://staging.business.com/categories/best-conference-call-services/","title":"The Best Conference Call Services of 2021","dek":"Which conference call service is right for your business in 2021? We review the top-rated services.","slug":"best-conference-call-services","lastModified":"2021-03-17T18:17:00Z"},{"doc_type":"category","thumbnail":"https://staging.business.com/images/rz/5e00d4787b43745d6a8b456e/Laptop_undrey_getty.jpg","canonical":"https://staging.business.com/categories/employee-monitoring-software/","title":"The Best Employee Monitoring Software of 2021","dek":"We've narrowed down the best employee monitoring software for businesses. Check out our best picks and reviews.","slug":"employee-monitoring-software","lastModified":"2021-03-05T15:40:00Z"},{"doc_type":"category","thumbnail":"https://staging.business.com/images/rz/5df905909c658a7e538b4567/Faxing_junce_Getty.jpg","canonical":"https://staging.business.com/categories/online-fax-services/","title":"The Best Online Fax Services of 2021","dek":"Online fax services are growing as more companies divest from conventional fax machines in favor of an automated, scalable and cost-effective option. Here's a look at some of the best online fax services on the market. ","slug":"online-fax-services","lastModified":"2021-03-02T16:07:00Z"}],"relatedSponsoredArticles":null}},"pageContext":{"displayModified":"2020-04-07T13:31:00.000Z","template":"v1","title":"7 Security Practices to Protect Your Business's Sensitive Information","meta":{"robots":"index, follow"},"docType":"articles","slug":"7-security-practices-for-your-business-data","canonical":"https://staging.business.com/articles/7-security-practices-for-your-business-data/","skipTOC":false}},"staticQueryHashes":[]}