Data Safety Instructions For Website Owners

Data privacy is one of the areas where the old adage “prevention is better than cure”, certainly applies. A small bit of malicious code uploaded to your website can cause immense damage, from the opening of a pop-up window to passwords or sessions stolen and complete system compromise. You should include in your security policy for data how often and when you are able to check your system for malicious code and what security measures are in place to minimize the risk.

Make sure that any software platforms or scripts you use on your website are updated regularly. Hackers are targeting security vulnerabilities in popular web software, and a lack of timely updates can make your system vulnerable. It is also recommended to restrict access to networks or databases to the minimum amount of people necessary to perform their duties.

Create a response plan to address any potential breaches and assign a staff member to manage this process. Based on the business you run you may need to inform customers, law enforcement agencies, and credit bureaus. This is a serious matter that should be planned well in advance.

Implement strong password requirements for consumer accounts and make sure you have a method of storing passwords like requiring the use of upper and lowercase numerals, letters and special characters, or using salt and slow hash functions. Avoid storing confidential information about users, and, when you must reduce the risk, do so by encryption or deleting the data after a specific period.

IEEE websites place cookies on your device to give you the best user experience. By using our websites, you agree to the placement of these cookies. To learn more, read our Privacy Policy.