At my place of employment, we don’t really have much for AIS in place, but we are
working on trying to figure out what we need to implement to become more secure. For
accounting, we use QuickBooks, along with spreadsheets and other documents. We have
a server, and a backup drive to back everything up every day, which allows us to restore
our system to any previous day, should the need arise.
We just had a meeting with our IT person yesterday, attempting to learn what our risks
are, and what we need to do mitigate those risks, while keeping our costs down. Every
company has its vulnerabilities, but we are in a situation where we don’t keep customer
information on file other than in QuickBooks, we do not store credit card information
either, but are still responsible for PCI compliance.
We came up with a step-by-step plan to implement security protocols. I contacted our
insurance company to find out what we would need to do to be in compliance with a
cyber security insurance policy and they sent us a beginner checklist which is how we
determined what our first steps would be. The first order of business is email security
protocols; we will implement multi-factor authentication on every computer, phone, or
other device where we access company emails.
This subject matter was very helpful to my current position, as it helps me to ask the right
questions and gives me ideas on what protocols we need to put into place.
