HIGH TECH COMPLIANCE

Although it might seem counterintuitive, high tech companies are considered particularly vulnerable to cyber attacks on information security. Why would they be significant targets? These high tech organizations often have a:

• Repository of valuable information that is attractive to both outsiders and insiders
• Pathway into other sectors; e.g. weak point of sale technology allows access to retailer info
• Risk taking approach; e.g. use the latest in devices and apps that are not yet proven secure
• Culture of openness and collaboration that stimulates creativity but not security

In order to reduce or mitigate the security risk, most tech businesses are required to comply with:

• Government regulations; e.g. HIPAA in healthcare
• Industry regulations; e.g. Payment Card Industry (PCI) standards
• Contractual requirements; e.g. Service Organization Controls (SOC) report on financial controls

If you work internationally, there are many other entities that require compliance for data security. It is your responsibility to do the research and implement the appropriate controls.

As a high tech business owner/manager, you understand that compliance with relevant regulations is important for security. However, compliance is just as important for demonstrating your trustworthiness to your customers.

In order to achieve compliance in most sectors, you will need to:

• Conduct a thorough risk assessment
• Develop and implement a plan to prevent and respond to security breaches
• Develop and implement a review and monitoring process
• Contract a third party for audits, if necessary
• Designate manager responsible for all aspects of compliance, including regular management reviews

Digital6 Technologies has the specialists to help you make sure the best compliance tools are in place.