|
Information Security AdvisorTM
Every organization with customers or employees who are Massachusetts residents must implement a written information security program (WISP), effective March 1, 2010, or face a potential $5,000 fine per violation. See Mass. Gen. L. ch. 93H and 201 Code Mass. Regs, 17.
IVLO helps organizations structure and implement "Managed WISPs," a combination of legal compliance and best business practices. A Managed WISP is the most direct path to protecting, in an efficient and cost-effective manner, the personal information of both customers and employees.
A WISP is a written information security program which comprises the comprehensive administrative, technical, and physical steps that an organization must take to safeguard the personal information of its employees and customers. Implementation and compliance with a WISP is required by Massachusetts law that became effective March 1, 2010. The Massachusetts law is the strictest in the United States; the compliance requirements have set a de facto national standard for information security best practices.
Information Security Advisor is one of a series of packaged legal solutions offered by Indigo Venture Law Offices on a fixed fee basis. IVLO is the first law firm committed to the packaging and delivery of value-added legal services on a cost-controlled basis. Packaging of legal services provides an organized set of tools that offer significant value to clients, such as consultations with an attorney, online resources, self help materials, checklists, and information that can be shared with accountants and other professionals.
Features
|
Consultations
Identification of Personal Information
PI Lifecycle Analysis
Final Policy Review
Documentation
Information Security (IS) Manual
IS Committee Meeting Agenda
Incident Report Form
Vendor Certification Form
Vendor/Supplier IS Compliance Provision
Employee Acknowledgment Form
Board of Directors' Written Consent
|
Records/Filings
WISP Records Book
Investigations
IT systems and policies checklist
Checklists/Guides
Issues for Discussion List
Guide to Establishing IS Program
Five-Week Action Plan
Resources
Data Privacy Quiz
PI Examples and Modes of Protection
|
|
