Data breaches can cost companies tens of thousands of dollars or more, and can pose a significant risk to company operations and reputation. Customer information is usually one of the favorite targets of hackers as it contains confidential details which can be used to commit property or identity theft. Even innocent mistakes such as a lost mobile device that contains (or provides access to) customer information can wreak havoc.

The purpose of this policy, written by Scott Matteson for TechRepublic Premium, is to establish standards for developing and implementing administrative, technical and physical safeguards to protect the security, confidentiality and integrity of customers’ proprietary information and consumer information.

Featured text from the policy:

Controls intended to fulfill the policy objectives include, but are not limited to, the following information security standards:

Customer information should only be collected, stored and accessed for business purposes by authorized personnel.

Assignment of security responsibilities to appropriate personnel and development of workforce security standards such as background checks and user profiles.

Security management processes to review and understand the collection, use, sharing and retention of customer and cardholder information in core systems and operations, so that risks are appropriately analyzed and threats addressed in relation to the classification and sensitivity of the underlying information.

Keep customer information safe with our five-page policy document. Previously priced at $29, this is now available for download at just $9. Alternatively, enjoy complimentary access with a Premium annual subscription. Click here to find out more.

TIME SAVED: Crafting this content required 10 hours of dedicated writing, editing and research.