With cybersecurity and data privacy an increasing concern, a comprehensive privacy and security program is essential for any professional organization. Compliance with the various, and many times conflicting requirements of clients and the legal system may further complicate the matter. In fact, clients have begun to view both legal and accounting firms as “vendors” and have no problem issuing their own requirements.

This CLE course will explain the fundamentals of a security and privacy program that is both solid yet flexible enough to respond to changing demands and needs. The course will explain how to build a program that can transfer risk and will include a discussion of Written Information Security Policies, Risk Management Programs, Client Contract Management Programs, Incident/Breach Response Programs and Department & Employee Policies. The course will also address the most efficient way to address client questionnaires on privacy and security and how to incorporate this ability into a marketing tool for your business