The Anthem Inc. data breach may have you wondering what you can do to strengthen your company’s data security.
The attack on the nation’s second-largest insurer is one of the biggest thefts of medical-related data in U.S. history. Sensitive information for up to 80 million people was exposed, leaving them vulnerable to lifelong battles with identity theft and related fraud.
When data breaches like this happen, businesses can face costs related to downtime and system repairs. Plus, they may be subject to lawsuits anticipating financial losses from identity theft. This is the case with Anthem, which faces two potential class-action lawsuits alleging it failed to adequately protect customer data.
What can you do to enhance your organization’s security posture? Follow these steps to minimize breach risks and post-breach costs.
1. Perform a security assessment. Bringing on a knowledgeable expert to conduct an assessment doesn’t have to be costly, and it can help identify critical weak points and practices, such as encryption of sensitive data, and layered security to protect information archives.
2. Stay updated. Vigilance around network intrusions, timely patching of software vulnerabilities, and off-the-shelf antivirus software can be highly effective when kept up-to-date and used judiciously.
3. Train employees. Basic education for employees on how to follow security best practices and spot potential data exposures can boost an SMB’s security profile and be instrumental in minimizing damage if a breach does occur.
4. Control access. Manage physical access to computers, as well as access to networks and protected data. Enforce strong user names and passwords. Reduce the number of privileged accounts, reduce privileges of authorized users, and record all logons and activities.
5. Manage risk with coverage solutions. SMBs can manage their risks with cyber liability and data breach policies that account for business interruption, forensic investigations, notification procedures and other potential post-breach costs.
For a data security consultation or if your business has experienced a breach, please visit //solutions or call 1-866-296-1755. CyberScout Solutions experts provide practical solutions to help businesses avert, prepare for and respond to a data loss incident.