Security Services

Over the last several years, it seems that more and more emphasis is being placed on corporate oversight and more tightly regulating business.

Terms like "HIPAA" (Health Insurance Portability and Accountability Act, a.k.a. "HIPAA"), "SOA" (Sarbanes-Oxley Act), and GLBA" (Gramm-Leach-Bliley Act) all reference various laws passed in the United States to ensure that businesses operate fairly and transparently to their stockholders and customers. These regulation require that businesses protect their computers and networks by implementing yearly security audits. Overall these statutes require that businesses take certain steps to properly secure their data, and to make sure that this data is retained for a specific period.

There is a tendency among small and medium sized business owners to automatically assume that these rules do not affect them, since they do not have stock that is publicly traded. To make this assumption would be a grave mistake, since even a small business like a local car dealership or insurance agency is subject to the same restrictions on maintaining the privacy and security of their customer's data as are large Fortune 500 firms. The penalties for non-compliance are high, and although they inconvenient for a Fortune 500 firm, they can completely wipe out the resources of a small business.

Complying with all of the regulations is a complex business that involves the services of many different professionals including accountants, lawyers, and technology specialists. Smaller businesses are most likely to be affected by Sarbanes-Oxley and Gram-Leach-Bliley since these two pieces of regulation deal with how long important business data must be maintained, and what steps need to be taken in order to ensure the privacy of customer and transactional data. Lasco consultants are familiar with the technical ramifications of these statutes, and can assist in performing regulatory audits to help bring your organization into compliance.

Our consultants can help with everything from developing a data retention policy and supporting technology, to the creation of internal-facing reports outlining the areas where your firm may be exposed along with the remediation steps necessary to fix the problem. Because of our experience working with a range of different clients, we have access to information about the current best practices in your industry, and our consultants can help you take advantage of that information and their experience. Contact us for more information about how we can help you make your business compliant by having us provide an objective security assessment.

Copyright©2010 Lasco, Inc.
205 N Lakeshore Blvd, Marquette, MI 49855
906.228.9720 | 1.800.800.6197 | lasco@lascoinc.com



admin