Six Steps To Reduce Cyber-Risk

Cautioning at the outset that failure to do regular risk assessments is often cited by regulators as a factor in bringing data security enforcement actions, attorney Gavin W. Skok from the Riddell Williams firm provides six steps that in-house and outside counsel can take to reduce the risk of a cyber attack. All companies are advised to review their data security at least annually, and any time new threats are revealed or new technology or processes are implemented. Importantly, vendors are on the list. Among other vendor-related suggestions: All vendor contracts should be reviewed with an eye on their security provisions.