No matter how rigorous you think you are in protecting your business against security breaches or other risks, there’s always room for improvement. Here are six simple steps you can put in place right away that can have a significant impact on reducing your business’ exposure to risk:
1. Have a written code of conduct. Writing down rules and repercussions for poor behavior is the best way to make sure your employees know what’s expected of them, as well as the consequences for risky or inappropriate behavior. Offer a copy of the code to new hires, and whenever changes are made, provide updated copies to all employees. Also be sure to review it frequently so it can evolve as your company grows.
2. Maintain ample office security. Make sure to install adequate locks on doors, windows, desks, file cabinets and individual rooms in your office, and keep a close eye on keys. Make sure employees change passwords frequently and adhere to your company’s BYOD policy (you do have one, right?). Install cameras and motion detectors as needed, and be sure to use adequate lighting in all areas, especially near entrances and exits.
3. Schedule regular security audits. Make time to regularly check documents in your employees’ possession, both at their work station and on their computers. The idea is not to penalize employees, but rather to identify risky behaviors or practices where your company can improve its overall security. Once areas in need of improvement have been identified, devise and implement strategies to overcome these weaknesses ASAP.
4. Shred monthly — or weekly. Pretty self-explanatory; don’t leave sensitive documents around. This includes not only your company information, but information provided by your customers. Put a shredding day on your calendar every month or week, and then be sure to stick to it.
5. Restrict computer access. While all your employees may need to access computers to do their jobs, they probably don’t all have to be able to reach every document or file you have stored on your computer network or in your company cloud. Designating clearance levels lets you decide who has access to what, and can be a powerful step in reducing the risk of security breaches and inadvertent — or intentional — information leaks.
6. Have an emergency plan in place. You and your employees should know what to in case of a fire, theft, natural disaster or other emergency situation to avoid unintentional security breaches. Like the code of conduct, you plan needs to be written down and provided to all employees. Review it at staff meetings to make sure it’s understood.
Read more
As your business grows, the risks you face become more complex, potential losses grow, along with your insurance premiums. At some point, you’ll need to decide whether it makes sense to turn over the responsibility for risk management to a full-time professional.
Before making this decision, experts recommend that you weigh two key factors: 1) the cost of paying a full-time risk manager, and 2) the potential savings that this manager can generate.
The first element is relatively easy to determine, it’s the salary and overhead of the manager, plus whatever clerical support that he or she needs.
The second item requires you to analyze the extent which a full-time risk manager can:
- Centralize and compartmentalize responsibility for risk management in a single department. This improvement in efficiency should more than offset the increase in administrative costs.
- reduce losses by providing analysis of loss control needs, careful scrutiny of reports, and knowledge of whom to contact for specialized help. Careful attention to loss reserves and adjusting practices can help cut costs dramatically. For example, adjusting liability and workers compensation claims requires special expertise. Insurance companies generally provide adjusters, it’s always helpful to have someone on your team who can evaluate their conclusions.
- help lower your premiums by paying closer attention to coverage criteria, negotiating with agents, brokers, and insurance companies, and using familiarity with industry terminology.
If you’d like our input on making this key decision, feel free to get in touch with the risk management professionals at our agency at any time. We’re here to serve you.
Read more
Demographic changes in today’s workplace are impacting the way risk managers handle lost Productivity, the cost of wage replacement, and skyrocketing workers comp premiums that are created by the health problems their employees face. Chronic medical conditions such as heart disease, arthritis, back problems, respiratory disease, and diabetes are far more prevalent among workers aged 55 and above. These workers account for an ever-greater share of the labor force, than among younger employees.
Employers who promote healthy life style choices offer an effective way to reduce health related costs. Experts recommend taking these steps:
- Encourage workers to educate themselves about their health problems.
- Offer health risk appraisals to employees.
- Introduce disease management programs to promote healthy behavior.
- Make healthy food options available.
- Encourage exercise.
- Discourage unhealthy habits. For example, make the workplace tobacco free.
- If you have a fairly large workforce, provide on-site medical facilities.
- Use employee assistance programs (EAPs) to help with family and home issues that often emerge when managing long term chronic conditions.
- Create mobility throughout the day. Being sedentary or standing for long periods can create problems for employee with health conditions.
- Conduct periodic ergonomic assessments.
- Encourage breaks in concentration and focus by dividing tasks into shorter cognitive units.
- Establish a safety committee that recognizes and rewards valuable safety suggestions.
- Build in accountability for the workplace health and safety committee at the supervisory level.
Of course, these guidelines apply equally to all of your employees.
To learn more, feel free to give a call.
Read more
If you want to manage risk within your firm, you need to familiarize yourself with risk-management language. Here are some basic definitions, provided by the National Alliance for Insurance Education & Research, which you can use to build your knowledge base:
- Exposure: A situation, practice or condition that might lead to a loss; an activity or resource (assets, people).
- Peril: A “cause” of loss; an event that might cause a loss.
- Hazard: A condition within an exposure that might lead to an incident; “a peril about to happen.”
- Incident: An event that disrupts normal activities and might become a loss or claim; “a near miss.” Lifecycle of an incident: Pre-incident, incident, immediate post-incident, post incident, rehabilitation (repair, recovery).
- Accident: An incident resulting in injury or damage to person or property which has, or will become, a loss or claim; “an unplanned event definite as to time and place that causes bodily injury or property damage.”
- Occurrence. An accident with the limitation of time removed.
- Loss: A reduction in value.
- Claim: A demand or obligation for payment as a result of a loss.
- Frequency: The number of times an incident occurs.
- Severity: The monetary impact of a loss.
- Expected losses: Loss projections (“loss pics”) based on probability distributions and statistics; frequently developed using actuarial techniques.
For a complimentary review of the risks your business faces, please feel free to contact us at any time.
Read more
On this Veterans Day, let us remember the service of our veterans, and let us renew our national promise to fulfill our sacred obligations to our veterans and their families who have sacrificed so much so that we can live free.
Read more
Businesses are transferring more and more client information files online for storage on hard drives in remote data centers or server farms that offer convenient Internet access. Buying space in this “cloud” (a $40 billion a year business, according to the IDC research firm) is becoming as common as paying for power, water and Internet service. With corporate spies after trade secrets, hackers out to steal sensitive financial information, and the federal government demanding online communications records, protecting data in the cloud creates a serious security risk for companies of all sizes.
“It’s easy to overlook security because of the virtual nature of the cloud,” warns Thomas Trappler, Director of Software Licensing at UCLA. “Your data is going over the Internet to another computer and not to some magical world where everything’s going to be fine.” Unfortunately, businesses often seem blissfully unaware of this threat: a recent nationwide study by the Ponemon Institute found that half the firms surveyed had not considered security risks when storing data with providers in the cloud.
A major question in these deals is determining who’s responsible for the risk of compromised data. Because companies often lack security expertise, they expect cloud providers to do the job. Some providers certify that they meet government or third-party standards for data confidentiality. However, few of them let clients test their digital security – which leaves their clients feeling that they might be liable.
To minimize this risk, Trappler advises businesses to:
- Evaluate the provider’s reputation.
- Insist on reviewing its encryption and security systems.
- Set guidelines for immediate notification of any breaches.
You can also protect yourself from the risks of storing data in the cloud by investing in Cyber Insurance. To learn more, just get in touch with us.
Read more
