Some are calling 2014, “The Year of the Data Breach”. Every business, regardless of size, needs to be concerned with breaches of private information. It is the fastest growing risk for all businesses in every industry. Data breaches can cost companies millions of dollars. (The Target data breach costs reached $148 million.) However, it’s not just the direct costs related to the data breach and resolution that are of concern. The damage to a company’s reputation and lost sales can be devastating.

Over the past year, there have been a number of high-profile data breaches including Apple®, Home Depot®, Target®, UPS® and Yahoo®; however, these are only a few of the data breaches that have occurred. The Identity Theft Resource Center® lists over 600 breaches in 2014 with over 77 million exposures. Data Breach

Because many high-profile cases involve large companies being hacked, smaller businesses may believe that they aren’t at as great a risk due to their size. However, many data breaches involve far more basic security lapses such as employee mistakes, inadequate system monitoring or the use of weak passwords. Smaller companies may also be targeted due to having less sophisticated security measures. Beyond system issues, breaches of private information can occur due to improper disposal of hard copy records, loss of a laptop, mobile device or transportable data storage device.

Steps to better manage data and cyber risks

Get organized – Inventory and document the risks your business faces. Identify all the places where your business acquires, uses and stores sensitive information such as website, marketing/sales databases, client/prospect records and human resources. Determine who is in charge of the information and who has access internally as well as third-party vendors.  Don’t collect or retain private information that you don’t need.

Get educated – Know the federal and state laws that govern information security and privacy including CAN-SPAM, COPPA, FACTA, US Patriot Act, and Massachusetts General Laws 93H, 93I and 201 CMR. You may even have contractual requirements for data security. Know whether you are in compliance or need to develop new strategies.

Get a handle on business relationships – Do outside vendors have access to your company data and systems for support functions? Does your company work with sensitive client information? Be clear on how agreements and contracts outline responsibility for data protection, confidentiality and privacy. Periodically audit and inspect to ensure ongoing compliance of your vendors. Ensure that you are meeting contractual requirements with your clients.

Get covered – When considering high-profile data breach costs, smaller companies may feel helpless in being able to recover financially; however, cyber insurance aka privacy insurance is available, which can help with the costs of recovery and claims should a breach occur despite your security efforts.  Most liability policies provide little if any protection for a data breach situation. Businesses should sit down with their agent to review their current protection and discuss privacy/cyber insurance options. Not all policies are the same, and your agent can help you find the solution that works best based on your level of risk.

Get a plan together – Once you understand the risks, build a plan and establish procedures for how data is collected, stored, accessed and shared. The Massachusetts Privacy Laws require that all businesses that receive, store, maintain, process or have access to personal information have a written information security program(WISP) on how they will protect such data. Having a data breach without having a WISP in place, will only exacerbate the issues a business faces.

Also, develop a plan for how your company will monitor, detect and respond should a data breach occur. Create plans in terms of information technology, legal, financial and public relations so that there is a clear action plan in the event of a breach.  The FCC has a helpful online tool called Small Biz Cyber Planner that can help businesses develop a data security plan.

Through better procedures, training and making reasonable investments to protect electronic systems, you can help your business avoid a data breach. While the specific challenges of data privacy and security are ever changing, the need for having a plan in place will remain constant.  No business can afford to ignore the risks because virtually every business maintains some type of personal information. It’s not enough to plan to protect the information; you also need a plan for the financial resources it will take to respond and recover should a data breach occur.

1 The Verizon® 2014 Data Breach Investigations Report
2 The Verizon 2013 Data Breach Investigations Report
3 2013 U .S. House Small Business Subcommittee on Health and Technology, “Protecting Small Businesses Against Emerging and Complex Cyber-Attacks”

Read Other Blog Posts

Umbrella

The Value of Commercial Umbrella Insurance

In today’s increasingly litigious environment, lawsuits stemming from liability incidents have surged in frequency and severity, leaving many organizations with substantial losses. Fortunately, that’s where commercial umbrella insurance can help.
Commerical truck and car

6 Factors Driving Commercial Auto Losses

A variety of trends have contributed to the rise of commercial auto losses. Here is a look at the most significant factors driving commercial auto losses across the country.
Confetti

Start the Year Right: 10 Business Insurance Tips

The beginning of a new year is the perfect opportunity to reassess your business insurance policies. Here are 10 practical tips to optimize your business insurance and start the year on the right foot.
Happy co-workers

Fostering a Culture of Workplace Safety

Fostering a strong safety culture provides many benefits to an organization. This article explains what it means to have a strong safety culture, outlines associated benefits and provides strategies small businesses can implement to establish this type of culture.
People celebrating

Hosting Holiday Parties Responsibly: Tips for Personal & Business Gatherings

While it’s easy to get caught up in the fun, taking some simple precautions can prevent mishaps and protect you from unexpected situations. Here are some practical tips for hosting a safe and successful holiday party, with a focus on being prepared.
Drowsy

Preventing Drowsy Driving

Every year, the National Sleep Foundation organizes Drowsy Driving Prevention Week to raise awareness about the dangers of driving while fatigued.
Flooding

Why Flood Insurance is Essential: Lessons from Hurricanes Helene and Milton

The devastating impacts of Hurricanes Helene and Milton have shown that flood risk isn’t limited to coastal areas. These storms have highlighted a crucial gap that individuals and businesses need to be aware of: flood damage is generally not included in typical home, condo, renters, or commercial property insurance, making a separate flood insurance policy essential for true protection.
Deer

Defensive Driving to Avoid Deer Collisions

With deer mating season in full swing from October through December, drivers face an increased risk of collisions. As deer are more active, especially around dawn and dusk, habitat loss has pushed them closer to roadways. Here’s how defensive driving can help you avoid an accident.
Massahusetts DIA Seal

MA Dept of Industrial Accidents New Notice Requirements

The Department of Industrial Accidents (DIA) has revised the Notice to Employees and has established new notice requirements. On or before September 16, 2024, all employers must utilize and repost the revised Notice to Employees poster.

Visit Our Business Insurance Page

Business Insurance

Murphy Insurance stands as your steadfast partner in safeguarding your business from unforeseen challenges in today’s dynamic business landscape. In an era where comprehensive business insurance is not just a prudent choice but a vital one for ensuring the long-term stability and security of your enterprise, we are here to offer our expertise. Running a business inherently entails various risks that can potentially impact your financial stability and reputation. Learn more about our comprehensive business insurance solutions, which are meticulously designed to protect you from these potential threats, granting you peace of mind necessary to focus on the growth and prosperity of your business.