Top 12 privacy and cyber steps to take in January

As we start a new year, one that will likely be full of privacy and cyber challenges, it is helpful to think about some key action items you can take to improve your company’s cyber posture. 

Here are 12 to consider for 2022 that can help reduce the impact of a cyber event.

1. Think about what steps you can take to assess and review your supply chain risk.
   
   
2. Review your incident response (IR) plan and make sure it addresses all current threats.
   
   
3. Talk to other key privacy and cyber stakeholders to ensure lines of communication are open and escalation criteria are clear.
   
   
4. Check your Securities and Exchange Commission (SEC) disclosures, if relevant for your company.
   
   
5. Review your current privacy policies and disclosures for accuracy.
   
   
6. Have a plan to track and deal with new legal requirements that are effective soon.
   
   
7. Have a plan to stay up to speed on new threats and vulnerabilities.
   
   
8. Make sure you have picked your IR vendors and have engagement documents in place.
   
   
9. Re-assess your company’s risk tolerance regarding privacy and cyber to make sure it fits the current environment and has been communicated to all key stakeholders.
   
   
10. Make sure business resiliency is appropriately factored into your planning.
    
    
11. Assess your current risk shifting devices, including insurance, and think about whether a change in strategy is needed.
    
    
12. Conduct a mini-tabletop exercise.

For more information, please contact the author of this article or your DLA Piper relationship attorney.