|
While it's questionable whether regulatory compliance,
for the sake of compliance, actually does
much to improve security, there's no doubt that laws
such as HIPAA are starting to have an impact on how
SMBs must approach security. This is true whether
the SMB is regulated directly or not.
And while all companies that process credit card
data need to comply with the Payment Card Industry
Data Security Standard, many SMBs either outsource
the process or don't accept credit card payments at
all. Ho...
To continue reading for free, register below or login
To read more you must become a member of SearchSecurity.com
wever, many SMBs are increasingly finding
that their large business partners and customers are
asking for verification that proper security controls
and BC/DR plans are in place.
Meanwhile, Schill advises that SMB security managers
be careful not to push tight security for security's
sake: "You have to be personal with [management].
Ask them their needs and feel out their opinions.
The more you seem interested in protecting their
interests, the more likely they are to help you with
yours."
|
 |
|
