Pro-actively drafting cybersecurity policies and protocols is
like doing a will for yourself, or an employee manual for your
company. The thought process is that there is nothing imminently
pressing that requires me to think about (or spend the time and
money doing) either, and the problems fixed by both will
"never happen to me." But the world is changing
rapidly, and the "it" in the "it will never happen
to me" is all of a sudden happening to companies all around
you when it comes to cyber risks, and data and privacy
breaches.
According to a recent article in BusinessInsurance.com,
"[m]ore than half of U.S. small and midsize businesses have
experienced at least one data breach[.]". . . The primary
causes of the data breaches were employee or contractor errors,
lost or stolen laptops, smart phones and storage media and
procedural mistakes[.]" Want a more stark framing of the
issue? The Los Angeles Times has reported that top U.S.
intelligence officials claimed last
