Re: How to implement Control of Employee Access to Client Data
Do your employees sign a non disclosure agreement?
Are your employees allowed to bring personal portable media?
Are your employees allowed to transport customer data off site without encryption?
When several employees are working on one project, how do you control change management?
Has your IT department figured out how to restrict access to specific users?
You can restrict access to specific users for specific clients if your organization has different customer projects on different drives or servers.
IF ANY OR ALL NO, YES, BIG RISK.