Don’t be the next victim. Get secure now!
The following questions relate to cybersecurity and customers’ data:
- What information do we have on file for our customers?
- Is this Personal Identifiable Information (PII)?
- Do we absolutely need to keep all of this data on hand?
- When was the last time we purged old or outdated customer records?
It’s important to regularly audit your customer data to ensure cybersecurity. Review which systems store your customers’ data, including CRM packages, accounting systems, file-sharing systems, and your website. This will help you identify any potential risks and take steps to protect your customer data.
Here are some things to consider when it comes to the security of your systems:
- Can you make them more secure? One way to do this is by using multi-factor authentication.
- When was the last time your systems were checked for security risks? If you can’t remember, then it’s been too long.
- Are we running the latest version of the software/system? Older versions tend to have security issues that are patched in new versions.
- Have you performed a penetration test to see how secure your system is?
Conduct a security audit of your systems.
- Make sure to tell your IT team about any staff changes.
- Accounts that are no longer in use should be deactivated to avoid potential security risks.
- Review your accounts to see if anyone has too much access and make changes as needed.
- To best protect your company, educate and train employees on cybersecurity defence mechanisms, as well whenever possible test their skills.
You should take action to remove unauthorised access and train your staff on cybersecurity protocols. If you share customer or client information with your suppliers, or if you grant them access to your systems.
Check your partners and suppliers to make sure they are meeting your expectations.
Consider the implications of a data breach at your company. If confidential information was leaked, would you be in compliance with Australian law? Data breaches are not uncommon, and many companies are ill-prepared to deal with them. Don’t hope for the best – plan for the worst by considering the possibility that someone already has access to your systems who should not.
