Suited man holding a tablet with a lock graphic spiraling

Keep Your Data Safe

Keep Your Data Safe

3 Minute Read

Cyber threats may be constantly evolving – yet many organizations are failing to take these basic steps to protect their data, their people and their reputation.

Your data isn’t the only thing at risk if you fail to take basic steps to protect your organization's information. You also jeopardize public confidence in your organization – along with your current and future business prospects – and may expose your organization to litigation and significant liability.

Learning the Hard Way

Nowhere is this more evident than through the string of ransomware breaches over the last several years. Compromised businesses lost productivity. Hospitals potentially risked patients’ lives. And courtrooms are overflowing with organizations who knew their systems were vulnerable – yet neglected to implement reasonable precautions which could have prevented or minimized the probability of a breach.

Companies are having to defend themselves against numerous class action suits alleging harm to shareholders, business partners and the public. Executives and board members are facing personal lawsuits for allegedly breaching their duty of loyalty, care and good faith by failing to implement and enforce effective internal data security controls and procedures.

And with new data privacy legislation now in place across Canada and Europe, it’s safe to assume the judicial consequences will only become more frequent and severe.

A Common Sense Approach

There are many steps an organization can take to protect its information. Even the most basic strategies can go a long way to preventing or reducing the harm of an attack.

These include:

  • Regularly updating software and security patches
  • Using real-time anti-malware and anti-virus software
  • Frequently backing up key data in multiple locations, including offline
  • Training employees to recognize phishing emails and other social engineer tactics
  • Establishing and promoting a central point of contact for end-users to report phishing attempts
  • Developing, implementing and periodically practicing an Incident Response Plan to identify, contain, eradicate and recover from cyber security incidents

None of these are a ‘one and done’ tactic. It’s critical to revisit, rehearse and review each on a periodic basis to align the organization with the most prescient and contemporary threats. These recent hack attacks, including "WannaCry", are a serious reminder to get your cyber security up to date, immediately.


  • Confidence

    November 29, 2023

    How recent tax changes impact professionals and professional practice owners

    Explore the impact of recent tax changes on Canadian professionals and gain insights into planning ahead for professional practices.

  • Progress

    November 29, 2023

    Case Study: Estate Planning for the Future of Disabled Family Members

    This case study illustrates how to provide for loved ones with disabilities when estate planning. Samuel and Sarita are caring for their disabled son as well as for Samuel’s mother and want to plan for the future in a tax-efficient manner.

  • November 28, 2023

    The many strategic priorities of local governments: MNP Digital Municipal Research Report

    What strategic priorities are local governments focusing on during digital transformation? Explore the results of the MNP Digital Municipal Research Report.