Contact Us Today! (972) 712-1515

"The Blog"

Cybersecurity: Protecting Your Business

Posted by Darryl V. Pratt | Mar 14, 2019 | 0 Comments

Cybersecurity is a growing concern for businesses, and small businesses are not immune from the threats posed by cybercriminals. Don't be complacent because your business is small: Almost half of all cyberattacks in the U.S. are directed at small businesses. In recognition of this serious problem, in August 2018, President Trump signed into law the NIST Small Business Cybersecurity Act, requiring the federal government to provide resources to assist small businesses in reducing their vulnerability to cyberattacks. 

What Should You Do?

It is important for you to take steps to protect your business's data, reputation, and customer and employee information. The following actions are among the most important for small businesses to consider:

● Establish easily accessible cybersecurity policies for your company, include them in your employee handbook and offer periodic employee training on what you require. As an aside, employees should be required to take any necessary steps to protect customer and business data. Some additional common practices include: 

o separate user accounts for each employee, 

o strong passwords for all laptops, tablets, and smartphones, that are changed every three months, 

o prohibiting the installation of any software on to company computers without permission, and 

o limiting administrative privileges to key employees and IT staff. 

● Restrict employee access solely to the business's information and systems needed to do their jobs. When an employee leaves the organization, make sure he or she no longer has any access to this information.

● Make sure your software, web browsers, and operating systems are updated regularly to defend against viruses, malware, and other online threats. Also, install hardware and software firewalls on all of your computers and networks, even if you use a cloud service provider or virtual private network.

● If employees use mobile devices that can access the business's network or confidential information, require them to password-protect their phones, encrypt their data, and install security apps to safeguard information when the phone is on a public network. Reporting procedures should be put in place for instances in which mobile devices are lost or stolen.

● Frequently backup all of your business's important information and store copies in a separate location or in the cloud.

Avoid Liability

Proactive steps to guard against cyberattacks are not only important to protect your business's financial welfare, they are also necessary to avoid liability under data privacy laws. If your customers' or employees' personal information is obtained by unauthorized parties, you may be vulnerable to civil liability if your business did not take the steps required by state law or steps reasonable under the circumstances to protect their information. 

In addition, if a data breach occurs, you could also be liable for civil penalties or claims brought by affected individuals if you don't act to mitigate the harm or remedy the situation, for example, by providing notice to those whose personal information was affected, even if your business initially took the proper steps to avoid such a breach.

We Can Help

Are you concerned that your business is vulnerable to cyberattack and the liability that may arise if your business is affected by one? Every business is different, and your cybersecurity strategy should take the nature of your business into account. We can help you evaluate your individual situation and take the necessary steps to protect your business. Call the Business Law attorneys at Pratt Law Group at (972) 712-1515 today to schedule a meeting!

About the Author

Darryl V. Pratt

With almost twenty-five (25) of experience as a dual-licensed Attorney and Certified Public Accountant, Darryl V. Pratt has practiced law in all areas of corporate and business law, non-profit law, estate planning, probate, guardianship, asset protection planning, bankruptcy (Chapters 7, 13 and 11), real estate, and taxation.


There are no comments for this post. Be the first and Add your Comment below.

Leave a Comment

DISCLAIMER Pratt Law Group, PLLC (PLG) has prepared the material on this web site, for informational purposes only; it does not constitute legal advice. Further, the material on this site does not create, and receipt does not constitute an attorney-client relationship. The information here is not intended to substitute for obtaining legal advice from an attorney. No person should act or rely on any information in this site without seeking the advice of an attorney. Members of the law firm of PLG are licensed to practice in various courts and jurisdictions; attorneys are specifically licensed to practice in state courts that are enumerated on their individual attorney profiles. We also have affiliations in particular cases with attorneys licensed in additional states. PLG does not offer any guarantee of case results. Although we are extremely proud of our excellent track record, past success does not guarantee success in any new or future case or client matter. This web site is considered advertising by the State Bar of Texas under the applicable law and ethical rules. The determination of the need for legal services and the choice of a lawyer are extremely important decisions and should not be based solely upon advertisements or self-proclaimed expertise. Only those attorneys who state they are Board Certified in their profiles on this website are Board Certified. All other attorneys are not Board Certified. Darryl V. Pratt is the attorney responsible for this site. The principal office of PLG is 2591 Dallas Parkway, Suite 505, Frisco, Texas 75034. Please note that the transmission of an e-mail inquiry itself does not create an attorney-client relationship. PLG cannot serve as your counsel in any matter unless you and our firm expressly agree in writing that we serve as your attorney. You should also be aware that the Statute of Limitations (the deadline imposed by law within which you may bring a lawsuit) may have expired or may severely limit the time remaining for you to file any potential claims you may have. Time is of the essence. If you believe you have a possible legal case, it is important that you seek out legal advice as soon as possible.