{"id":4730,"date":"2024-02-19T17:10:10","date_gmt":"2024-02-19T22:10:10","guid":{"rendered":"https:\/\/eptura.wpengine.com\/?p=4730"},"modified":"2024-09-10T00:33:29","modified_gmt":"2024-09-10T04:33:29","slug":"security-for-workplace-technology","status":"publish","type":"post","link":"https:\/\/eptura.com\/discover-more\/blog\/security-for-workplace-technology\/","title":{"rendered":"Important security features for workplace technology"},"content":{"rendered":"

As your organization embraces remote and hybrid work models, data security becomes more important. In the past, companies benefited from having nearly everyone in the same office, connected to the same systems, making security easier because everything was focused on single locations.<\/span>\u00a0<\/span><\/p>\n

But as the workforce spreads out, vulnerabilities may increase. For example, it’s harder to protect sensitive information on personal laptops and in homes or coffee shops where employees may be working on public Wi-Fi, despite company policies. So, as you evaluate new workplace technology, you need to work closely with your information technology (IT) department to ensure it has the right security features.<\/a><\/span>\u00a0<\/span><\/p>\n

Regulations governing workplace technology<\/span>\u00a0<\/span><\/h2>\n

In an interconnected world, requirements from far away can have local implications. The Internet has connected the world so intricately that we can hire employees \u2014 and provide services to \u2014 from just about any country in the world, so make sure you’re in compliance with international regulations governing privacy and security.<\/span>\u00a0<\/span><\/p>\n

General Data Protection Regulations (GDPR)<\/span>\u00a0<\/span><\/h2>\n

While you’re probably aware of European Union (EU) security and data privacy laws, you may not have considered how they impact your workplace technology.<\/a> If you are using applications that collect employee data (such as <\/span>wearable devices<\/span>), you need to notify employees about what information you plan to collect, how you will use it, and how you will keep any personal information secure. Even if you aren’t doing business in the EU, this is essential for building a relationship based on mutual trust.<\/span>\u00a0<\/span><\/p>\n

Your IT team might also have to evaluate third-party data processors, including cloud providers, and ensure they comply with GDPR.<\/span>\u00a0<\/span><\/p>\n

California Consumer Protection Act (CCPA)<\/span>\u00a0<\/span><\/h2>\n

Under the <\/span>California Consumer Protection Act<\/span>, businesses must disclose any personal information they collect and share. Consumers also have a right to ask businesses to delete their personal information or forbid them from selling it.<\/span>\u00a0<\/span><\/p>\n

While this likely won’t impact employee applications, you may need to re-evaluate the type of information you collect from customers and ensure you are properly disclosing it.<\/span>\u00a0<\/span><\/p>\n

SOC compliance<\/span>\u00a0<\/span><\/h2>\n

SOC compliance shows your organization’s information security is high. SOC1 compliance is for companies that hold financial information and SOC2 is for all other companies.\u00a0<\/span>\u00a0<\/span><\/p>\n

If your company is a service organization, you’ll probably have to pass a SOC2 audit to be able to provide services to other companies. What does that include?<\/span>\u00a0<\/span><\/p>\n

The five principles of SOC2 compliance are:<\/span>\u00a0<\/span><\/p>\n