Sleep well, do you?

- Image via Wikipedia
I stumbled upon this blurb the other day about a survey, which shows that a large percentage of small business owners are whistling by the graveyard.
It seems small business owners would rather focus on growing their companies than on protecting them. Naturally. Most small business owners are entrepreneurial by nature. Risk is just part of their landscape. It’s not in their nature to stress over it.
At some point, though, you cross a line between optimism and denial. Case in point: 41 percent of small business owners surveyed are “extremely confident” that they’re protected against insurable risks that could drive them under or cause huge financial losses. Yet 39 percent said they “can’t make the time” necessary to identify those risks and manage them.
See the disconnect? Anyone who has eaten a big loss has plenty of time to insure against another. It’s sort of like people who back up their hard drives. If you’ve ever lost one, your back-up plan probably borders on compulsion.
The computer analogy is especially appropriate here because one of the big risks small businesses face is data loss owing to hardware failure and human error, not to mention more sinister varieties of data breach.
I won’t bore you with stats. You already know this is a huge problem that’s growing worse. Businesses that accept credit cards or store personal data, like Social Security numbers, are vulnerable to losses. Expensive losses, not to mention lawsuits and reputation implosions.
What’s more interesting is that many of these losses originate from simple managerial oversight or common criminality as opposed to high-tech intrusions.
Check this list of data breach incidents from the Privacy Rights Clearinghouse. Choose a month then scroll down and scan the descriptions. You’ve got employees losing company laptops, dishonest workers selling credit card numbers and outdated software displaying personal data online.
Notice that the list of organizations covers the spectrum from giant corporations to mom-and-pop restaurants. Auditors went into the Oakridge National Laboratory in Columbus, Ohio and found old hard drives containing sensitive information tossed into hallways, unused offices and loading docks.
So, let’s say you own a restaurant and someone on the wait staff decides to keep credit card numbers. Or maybe you run one of those varicose-vein removal centers and a laptop full of patient records turns up missing. Or suppose your server crashes and takes about three years worth of critical data with it.
Are you ready for that? Are you covered, if patrons or patients sue you? Are you covered for the many thousands of dollars it’s going to take to try to recover data from that crippled drive?
If not, you might want to make time to learn about data breach insurance. Better now than after a meltdown. A good policy could literally mean the difference between a setback and a total loss.


![Reblog this post [with Zemanta]](http://img.zemanta.com/reblog_e.png?x-id=1c03526f-8c3b-4338-a0e3-69043312336f)