Cybersecurity Is A Governance And Risk Management Issue

More companies are coming to see cybersecurity as part of a larger compliance and integrity program, rather than shunting it to the IT department today and litigation counsel tomorrow. Treating cybersecurity this way means addressing it like other risks, examining it carefully and responding appropriately. Foley Hoag attorneys Peter A. Sullivan and Christopher E. Hart explain how that can be done systematically and effectively by way of six widely applicable best practices, beginning with a complete internal audit that clarifies the type of data that is collected and maintained, where – physically – it’s kept, who has access to it, and what the protocols are for either keeping or discarding it.