Menu
Many businesses, especially smaller ones, have a blind spot when it comes to security and risk management, especially when it comes to internal policies. While there are ample technology solutions available to deal with the threat landscape to protect data and system uptime, there is no technology solution that will completely address the risks posed by irresponsible end-user behaviour. There are also limits on what technology investments most organizations can make, so it’s important to get the best return on investment on your risk management tools and efforts. Strong policies that are well understood by staff are often the least expensive and most effective ways to avoid costly IT challenges
Data Compliance standards also demand internal policies as well as the technical controls, so even if you think the policies aren’t worthwhile, it’s possible that you still need to create them. In this blog, I outline the IT policies that every organization needs in 2020. Hopefully, you have some of these in place already, but if not, I encourage you to use this blog as a jumping off point. Keep in mind as you read this that some organizations may call these policies different things, but the important part is that the goals of these polices are intact.