Data Security Risk Assessment
The State of Massachusetts has implemented new regulations requiring businesses to comply with the 201 CMR 17.00 Standards for The Protection of Personal Information. This had been move out from the original date of January 1, 2009 to March 1, 2010 for some of the requirements. All businesses hold personal information on their computers, if not customer data then employee data. This is what the regulations are about and we can put policies and appropriate security measures in place to protect your sensitive data. No company is exempt and the Attorney General has the enforcement role under this statute.
The Paxton Group has the necessary tools and services to insure that your company meets the 201 CMR 17.00 requirements. We have been working with data security for 15+ years. Some of these requirements you may already have in place and may just need to have policies documented. The costs discussed in forums around the state are scaring most business owners. This should not be the case if you protect your network with the basic security tools (i.e. firewall, antivirus, logon usernames and passwords) today, the remaining requirements are not as costly as you may think to insure that your company is in compliance.
The Paxton Group offers services that greatly reduce your costs by redirecting email for content scanning, spam filtering and anti-virus scanning as well as outbound DLP and email encryption. We can also assist your company in meeting such standards as HIPPA as used in the medical field as well as the many data security regulations used in the financial sector. Our staff is certified in security by CompTIA and our equipment is EAL certified. Take a look at our page on DLP for more information.
The Paxton Group can provide a data risk assessment of your company. This is a low cost analysis that will inform you of what you need to implement to comply with 201 CMR 17.00 regulations as well as to protect your business's reputation and sensitive information. To schedule an appointment or request additional information email or contact us.