Published on:

Attorney General’s Guidelines for Business Cybersecurity

In the aftermath of high profile cybersecurity breaches, businesses and consumers are alert to the real dangers of cyber vulnerability. In response, various government agencies have taken up efforts to protect against future breaches. Thus, consumers and businesses must continue to take steps to protect themselves and their private information. Accordingly, the office of California’s Attorney General has issued Cybersecurity Guidelines aimed at reducing the threat of electronic security leaks. Furthermore, these guidelines set the standard that businesses must meet to protect customer privacy.

What Are Attorney General’s Cybersecurity Guidelines?

The Attorney General outlined the basics steps to “minimize cyber vulnerability.”  First, anyone could be a target. Therefore, assume cybersecurity could affect you and take preemptive steps to protect your network.  Also, it is important to know where you store your data. The guidelines are directed towards small to medium-sized firms.  So, they focus on the importance for businesses to know which third parties hold company information. It is important to be familiar with these third-party security measures. If a data storage company is not taking proper steps to protect cybersecurity, it may be time to seek different storage options or take steps to counter the vulnerabilities. Alternatively, if your business stores information on the cloud, make sure to back up information, and store data only with secure entities. The overall point is that in the event of a breach, the level of preparedness will limit the consequences.  Next, encrypt your data as an added measure of security. It is also helpful to include firewall and antivirus protection on all devices.  Additionally, make sure to conduct banking and other financial transactions with reliable vendors.  Especially when dealing with third party financial information, the safety and security of those transactions are vital to ongoing business.  Finally, it is important to note that these guidelines are the minimum requirements. It is not a comprehensive list and companies must take care to implement personalized measures based on their cybersecurity needs.

What Additional Steps Will Improve Cyber Protections?

Before putting together any comprehensive cybersecurity plan, an entity must understand the threats it faces. This includes reviewing where data is stored and assessing particular and potential threats. Determining the dangers will help put together an accurate risk-based safety plan that best addresses your specific needs. Additionally, it is important to evaluate a business’s cybersecurity plan in context. In general, each business exists in relation to its manufacturers, suppliers, distributers, and customers. And, each link is implicated in the event of a breach. Therefore, it is important to consider how reasonable measures will help protect their information and security. It is also important because if there is a cybersecurity breach, the appropriate measures will help protect those links and limit the spread of the breach. This is a crucial step for businesses that hope to return to their regular course of business and maintain business relationships.

At our law firm, we help our clients review their cybersecurity needs and potential threats. Then, with the help of an experienced and knowledgeable attorney, we help you put together a cybersecurity plan to protect your business and customers. You may contact us to discuss your cyber protection needs today.