For example, do not distribute outside the company any information marked data secure, proprietary or restricted. Other information that may be considered proprietary is anything that is strictly relevant or particularly linked to a company's performance, finances or risks. Poppell says general trends, facts or documents prepared for public consumption, such as studies or reports. Receiving proprietary information may also be a risk, he says, especially if that information is then passed on to another person or organization. Sun's Harrington says.
Risk managers have to do due diligence.
Everybody has to be aware of security and make sure systems secure information for the information supplier and information receiver,'' she says. But she has not changed the company's insurance or bought new insurance to deal with risks associated with the Internet. The security of the firewall dictates the security of company information, and may create risks. Companies should also distribute guidelines to employees who have access to the Internet. Such guidelines raise employee awareness and sensitivity to such issues as copyright infringement, sexual harassment, etiquette, and other types of Internet liabilities, she says.