2. Use strong password protection and two-factor authentication<\/h3>\n
Have strict rules on the format of passwords and encourage staff to use random words rather than words with a personal resonance. For extra security, put systems in place that ensure these are changed every 2 months, and that they cannot use the same password again. Where possible, always use 2-factor authentication to log in to any system you have that contains sensitive data.<\/p>\n
You could also use a password manager browser extension, such as Dashlane<\/a>, Lastpass<\/a> or Keeper Security<\/a>. These all have two-factor authentication and allow you to create random passwords and save them to your password vault.<\/p>\n Identify different types of data and in terms of how sensitive it is – categorise this data. By prioritising data in this way, you can grant and restrict access to employees where necessary, thus reducing the possibility of data interception.<\/p>\n For example, financial data might only need to be granted to the finance department or client communication might only be necessary for Sales team.<\/p>\n Physical documents will need to be shredded to ensure the data is illegible. When getting rid of your devices \u2013 such as work phones, laptops, tablets or computers etc. all data must be wiped before they are disposed of or recycled.<\/p>\n You could consider encrypting all the data on your laptop or computer, however, if you feel this is too extensive, you may choose to only encrypt files with the most sensitive data. Any data that is being transferred or emailed needs to be encrypted.<\/p>\n Whether it\u2019s your staff bringing in personal devices, or visitors and clients bringing in their devices for a meeting, make sure these are connected to a different network to that used for your company computers. External devices can be infected with malware, and the owner may be unaware that their device is infected. Sensitive data can then be stolen if the device is connected to corporate networks.<\/p>\n These methods of data security management are important steps for your organisation to follow, and none are too complicated for any business to carry out. If you take data theft seriously, implementing ISO 27001 will ensure you have systems and processes in place so that you can ensure your data is highly secure. To learn more about how ISO 27001 can help your business, download our free guide.<\/p>\n3. Identify and classify sensitive data<\/h3>\n
4. Properly dispose of sensitive data<\/h3>\n
5. Encrypt data<\/h3>\n
6. Be careful with personal devices<\/h3>\n
![\"ISO](\"https:\/\/no-cache.hubspot.com\/cta\/default\/3038466\/edcc4cc4-9eb0-4902-a150-32cef28ddfe8.png\")
<\/a><\/span>