Which agency is issuing fines for lacking data security policies? The Securities and Exchange Commission.
Why is the SEC fining a company? Two reasons:
- It failied to have an adequate daa security policy in place before it experienced a data breach that exposed financial records of 100,000.
- Let’s repeat, the company never adopted written policies and procedures
- The company did not conduct periodic risk assessments
- The company did not implement a firewall
- The company did not…