Follow Kara Linkedin Twitter Facebook
Email Kara Email
Legal Issues
Jan 15, 2016

The First Step Of Cybersecurity Plans: Know Your Data And Its Location

Sponsored Content provided by Kara Gansmann - Attorney, Cranfill Sumner & Hartzog LLP

This article in a series on cybersecurity for businesses delves into the first of five main goals of a company’s cybersecurity policy: taking stock of all personal information your business possesses, locating it within your business, and identifying who has access to it. Understanding how personal information moves into, through and out of your business is essential to assessing cybersecurity vulnerabilities.
 
What is personal information? “Personal information” is statutorily defined in North Carolina to include a person’s first name or initial and last name in combination with any of the following: Social Security numbers, employer taxpayer identification numbers, driver’s license or state identification numbers, passport numbers, checking and saving account numbers, credit and debit card numbers, PINs, digital signatures, biometric data, fingerprints, any number that can be used to access financial resources, or a parent’s legal surname prior to marriage. An individual’s email name or address, Internet account number, Internet username, or password may be considered personal information if it would permit someone to access financial accounts or resources. Information in publicly available directories, such as a phone book, or government records such as a person’s name, address, and phone number, is not “personal information” under North Carolina identity theft laws.
 
Where to find personal information: We often think of personal information as just being electronically stored, but it can also be in paper records stored at or by your company. While each business’s collected personal information will vary, here are some places to locate it within your company:

  • Inventory Equipment: Examine your file cabinets, computers, mobile devices, flash drives, disks, employees’ home computers if used for work, digital copiers and other equipment to determine where sensitive data is stored. 
  • Assess Access and Use of Personal Information: Talk to your salespeople, IT staff, HR staff, accounting personnel and outside service providers to get a complete picture of how personal information is received and used in your company. Know who sends personal information from your business. Consider how personal information is received into your business, whether it is by email, website, call centers, contractors or mail. For example, do customers submit payment card information to your company online? If so, where is it stored and for how long? Evaluate what kind of personal information is collected at each point of entry into your business and where that particular kind of information is stored. Finally, examine which employees or others have access to personal information and whether that access is necessary. Identify whether unauthorized people could also access that same information, including vendors who supply or update software or contractors in a call center.
  • Know the Law: While you are taking stock of the data in your files, take stock of the applicable laws. Certain state and federal laws may require your particular business to provide reasonable security for certain sensitive data.
While different data presents varying risks, knowing the kind of personal information your business possesses and where your business keeps it is the first step in a cybersecurity plan to protect your company. In my next article, you’ll learn about step two of a cybersecurity plan: scaling down necessary personal information.
 
Kara Gansmann, a North Carolina native, is an associate in Cranfill Sumner & Hartzog LLP’s Wilmington office, where she focuses her litigation and appellate practice on various aspects of labor and employment law, business and contractual disputes, medical malpractice, and HOA matters. To contact Kara Gansmann, call (910) 777-6055 or email her at [email protected].  
 

Other Posts from Kara Gansmann

Wbj insights revised 0510 121615113531
Ico insights

INSIGHTS

SPONSORS' CONTENT
Capefearrealtors tomgale headshot

How REALTORS® Can Help With Home Safety Issues

Tom Gale - Cape Fear REALTORS®
Drewsmith copiersplus headshot

Desktop Printers In Offices, Yes Or No?

Drew Smith - Copiers Plus
Mikeharrington carolinaretreats 2

Boosting Off-Season Vacation Rental Income With Technology Upgrades: Gaming, Wi-Fi, Charging Outlets, TV, Streaming, Etc.

Mike Harrington - Carolina Retreats

Trending News

Will $500M Development Across The River Sink Or Swim?

Cece Nunn - Oct 15, 2021

Wilmington Entrepeneur Launches MyPeriodPal

Johanna Cano - Oct 15, 2021

NCino's Expansion Progresses At Wilmington HQ

Cece Nunn - Oct 15, 2021

Info Junkie: Jhaniqua Farrar Palmer

Staff Reports - Oct 15, 2021

New Eateries Add Flavor To District

Justin Pope Williams - Oct 15, 2021

In The Current Issue

Health Care Heroes: Community Achievement

The Community Achievement Health Care Heroes category honors an individual or team who successfully implemented a program addressing a probl...


Health Care Heroes: Volunteer

This category honors volunteers at a health care provider or other health-related organization who are considered exemplary by people within...


Heroes Who Stay The Course

Heroes aren’t those who only rise to the occasion in a movie’s big fight scene. In the real world, they tend to be those who keep showing up...

Book On Business

The 2021 WilmingtonBiz: Book on Business is an annual publication showcasing the Wilmington region as a center of business.

Order Your Copy Today!


Galleries

Videos

Trying to Grow a Business?
2020 Health Care Heroes
2020 WilmingtonBiz 100