What is a Data Security Audit?

A data security audit starts with assessing what information you have, how it flows and identifying who has access to it and building a design flow to document it. Understanding how sensitive information moves into, through, and out of your business and who has (or could have) access to it is essential to assessing security risks.

Why do you need a Data Security Audit?

Your company is at risk from lawsuits that surround sensitive data including privacy, web site content and e-mail use. Electronic data held on your computers your responsibility and if it becomes lost, is mis-used or stolen it is the responsibility of your business. As outlined in the Federal Trade Commission's new handbook, Protecting Personal Information: A Guide for Business, a company should take stock of its data security. In other words perform an investigative audit of your information practices (People, Process and Technology). Federal regulations mandate that there are no information security leaks in the lifecycle of secure data; this includes its destruction and recycling. In December 2006 a federal law was passed that made destroying data equal to virtually shredding evidence if not done properly and according to formal procedures. There are a number of federal laws and regulations, including HIPAA, Sarbanes-Oxley, FACTA, GLBA, which govern the data lifecycle and require that establishments with high and low-profile data keep their data secure.

How can eFortresses assist?

eFortresses subject matter experts can:

	Review the "Privacy" and "Information Security" requirements that affect your business
	Review your current contracts, policies, and procedures and how they cover processes such as:
	Customer Agreements Privacy guidelines Data Security guidelines Vendor Agreements Access control procedures and agreements Web development

Our subject matter experts can also:

	Review current legal and regulatory issues, including government mandates on privacy
	Train your staff on applicable data breach security notification laws
	Audit applicable technologies and build out process and data flows to be used as the process blueprint for facilitating improvements
	Define and build out enforcement procedures and establish appropriate actions for further improvement.

Contact us for a free cost analysis today.

For more information, please contact us by filling out this form

Name *
Title *
Email *
Telephone *
Job Title *
Company *
Address *
City *
State/Province *
Postal/Zip *
Country *
	Security image: Verification (Type what you see (case-sensitive)):
Comments *