Tip oh the month.

• Position: Preventing data breaches - Brief article

CAMICO Insurance Tip of the Month: Preventing Data Breaches

After conducting a risk assessment of its computer system, a firm should develop a written information security plan that:

* Outlines the specific ways the firm will protect data;

* Sets forth policies, procedures and staff responsibilities--including what staff members are not allowed to do, and what they are required to do and report;

* Covers areas such as the Internet, social media, email usage, and record retention and destruction; and

* Details the reporting and other requirements of the states in question and the state agencies to which breaches are to be reported. Some states require firms to be compliant with the state's privacy laws if the firm has the...