5 Technology Policies You Should Be Reviewing Now


Admittedly, we all have a little extra time on our hands this year. Hey, so now’s the time to take care of those important management details that help govern the operation of your business!

Technology-related policies reflect management’s intent to control their information system – the absence of policies usually reflects poorly in court of law and public opinion: if management never communicated a position on a technology governance to employees, customers, or vendors, then “Due Care” obligations could be considered ignored. Thus, it could be seen that management was negligent in their handling of an issue which extends liability, making it difficult to prove that “reasonable” precautions were taken in preserving customer data, securing network resources, or terminating an employee due to cause.

1. Write or revisit your Technology Plan (TP). The TP is a complementary document to your overall business plan and would traditionally be prepared by the executive responsible for technology strategy. It is usually 24 months in scope and identifies how tech spend complements your business strategy. It is an evolving document that lays down principles in how technology will be used and managed within your firm, and how tech relates to your success. This document should help guide your purchasing, management, and deployment of tech indefinitely, and should evolve over time as technology issues continue to shape the macro economy.

2. Write or revisit your Disaster Recovery and Business Continuity Plan (DR/BCP). Think about how critical software and hardware is to the execution of your business strategy. Think about how important the years of electronic data is to your ability to do your job. Now think about this stuff being wiped out in a flood, burned in a fire, or just the victim of bad luck – a hard drive failure. After Hurricane Katrina, more than 20,000 small businesses folded on the Gulf Coast because they didn’t have a way to recover their electronic data to resume business operations. Now is precisely the time to revisit how data is stored, how it is backed up, how it is moved off-site, and services would be restored in the event of an emergency.

3. Write or revisit your Acceptable Use Policy (AUP). The AUP is the most critical policy in your Administrative arsenal. It outlines to employees and others who use your electronic resources what rights and obligations they have in using your resources. It is usually the principal document that is signed at the employee hire that outlines what is good and bad behavior in using your resources, and is the governing document allowing employers to terminate for cause. If an AUP doesn’t exist, it’s difficult to suggest that expectations of behavior was communicated to employees and a wrongful termination defense could be mounted. An AUP should be an evolving document as threats in IT change every 24 months. Now’s the time to really take a look at this again.

4. Write or revisit your privacy policy and legal liability towards protecting personal private information (PPI). Your firm may be subject to federal or state regulations governing the security and privacy of electronic information – of patients, consumers, job applicants, or financial records. Fines are usually bestowed on a “per incident” basis, and if you have thousands of records outside of compliance, the liability is enormous. Further, it’s best practice these days to communicate to stakeholders up front how you manage PPI and secure it. If you don’t have a privacy policy, “Due Care” concerns could be raised that management was negligent in managing the private information of a party, which could result in civil tort for damages. Over 31 states have individual laws governing PPI; that in addition to the federal laws governing protected classes of information demands a thorough investigation in your compliance obligation.

5. Write or revisit your procedures governing employee terminations and audits. Finally, keep in mind the number one security risk for you during these economic times. It’s not hackers, viruses, or malware. It’s employees, and specifically, terminated employees who’ve still access to your confidential intellectual property. Now’s the time – if any – to revisit those procedures and verify that employee access restrictions are performed, documented, and reviewed.

Policies, procedures, work instructions, and plans are Administrative Controls that reflect management’s _intent_. If management’s intent isn’t communicated, and technology is governed by assumption and intuition, then management isn’t “managing” technology – they are hoping for the best without taking on responsibility to effectively govern it. Now is your chance to reflect upon how your intent is reflected in the workplace and how well you’ve addressed technology “Best Practices” and regulatory compliance issues as a management team.

34 Comments

  1. When I go through an article that makes this subject matter so interesting I have to say something. Your informative points and interesting material has provided me cause to ponder these things.

  2. Usually, I actually dislike educational content material, but I really like this post. You have got a really fine ability and I liked this. Thanks.

  3. A decent post is a lot more than just creating words. This takes special passion for the art to generate fine material. I can feel the enthusiasm in this article and I accept the points right here.

  4. This is the first time in a number of years I had been capable to read through an article without being bored. Thanks to keep my focus.

  5. Thought-provoking content is rare from what I have been going through recently. You have a genuine gem here. It has truly made a lot of thought within me and I thank you so much.

  6. Very nice write-up! I actually agree on practically every aspect of this information you have created. You actually have got great insight on this subject. Many thanks for rendering this specific so clear and also easy to understand.

  7. I personally never ever knew any other individual shared my opinions on this subject matter. Many thanks for confirming my personal beliefs as well as rendering this content so crystal clear and simple to read through. I personally believe you’ve intentions of writing more.

  8. Quite exciting. I have been looking at your current write-up and I ought to agree with plenty of what you say in right here. Incredibly fine job.

  9. It is difficult to challenge superb information just like this. The points are right on and I agree with you 100 %. Many thanks for rendering it really unique.

  10. Brilliant job on this content! I cannot express how this created a difference in my thoughts in this matter. You actually compiled a good post here. I love it.

  11. I’m grateful I discovered your own article. The information is smart and interesting. This is actually a must-read for everybody. I personally, for one thank you for your efforts.

  12. It is not like me to go through much on the internet content such as this, nevertheless I genuinely enjoyed your own write-up. It’s a very well done write-up with exciting info.

  13. It’s obvious that the writer of this post completely understands the topic. You have posed a few really interesting, and also thought provoking ideas. I am persuaded that this post is the very best I’ve gone through on this subject matter.

  14. The volume of info in this article has enthralled me, since all I’ve been able to get is preliminary information on this particular subject matter. Thank you.

  15. I’m not an easy-to-please reader, nevertheless your exciting viewpoint on this topic has retained my own focus. This is one of the greatest posts on this subject matter I’ve ever gone through. This particular is wonderful material.

  16. I have to let you know how outstanding I think your info is in this article. You have made things crystal clear and easy to comprehend. I actually found this to be a really good article. Thank you.

  17. This post is a lot more than intriguing. You actually have compiled this in such a special manner that I just read it and also stayed interested. I personally accept the points within your material.

  18. I enjoy any well-composed article just like a number of other web based readers. I personally had been surprised that this particular info was so very intriguing. You’ve provided me personally cause to reflect on many elements of your content. I actually like that.

  19. I actually think your current post is very well-crafted. I concur with a lot of the information you have in this post and definitely will read it over again to consider many others. I personally like your extremely decent style.

  20. You were able to truly fill this post up with info that is of actual value. I personally value extremely good writing, and that is ideal. I accept the points you make here. Rather amazing work.

  21. Extraordinary article! You have utilized relevant material and also sensible points in this particular material. I actually agree with lots of the views. This specific is interesting and very well worded.

  22. Compiling an outstanding article requires dedication as well as pride in an individual’s job. It is obvious that this writer has it together. Each and every point is well formatted. The grammar and also spelling is fantastic.

  23. This particular content is marvelous! It’s filled with incisive information plus the points you make are logical and strong. I actually agree with a lot of this particular info.

  24. I was quite astonished after I discovered this post. Many thanks for this specific informative content as well as discussing your own perspectives. That is actually very good quality job.

  25. Many thanks for compiling this kind of remarkable article. A couple of thumbs up for this very well written as well as researched content. It is full of engaging stuff. You are definitely a blessed writer. Thank you.

  26. I plan to return to your own article later on in order to read it again as well as consider the points you make in it. It is by now within my favorite’s folder. Many thanks.

  27. This specific writer is really gorgeous with the amount of information communicated, and also the in-depth descriptions utilized in the information. The post compiled will make a wonderful beginning for any weekly newsletter published over the internet.

  28. A lot more writers should care about developing wonderful, well-written content material just as much as this writer does. Superb syntax and relevant material helps to make the difference in this content. Truly excellent work.

  29. The points you’ve created here are extremely good and I also accept a lot of this particular info. This particular is a really great post. Many thanks.

  30. A lot of instances I just read boring content articles on topics similar to this as well as lose interest in reading them. I’m happy to observe that you’ve changed my position on this subject matter by writing interesting material.

  31. This is very smart and well written material. I value the layout and the way you’ve delivered your own opinions. I agree with you on numerous points and many made me reflect on them.

  32. If phrases are armor you’ve written a great suit here. I can’t question the points you make here because they’re way too nicely thought out as well as written. Many thanks for creating this kind of interesting post.

  33. It really is one thing to speak your mind personally, and also very another to set things on paper. You have been successful in making this specific topic very easily understandable, interesting and readable.

  34. It’s satisfying to find out that your particular content confirms my point of view. I couldn’t have mentioned this better personally. You have truly gone far above with this write-up. Thank you very much.

Comments are closed.