To improve the company's information security program need to create a comprehensive security policy and implement strong firewalls.
STEP :
1. Create a comprehensive information security policy that outlines acceptable use of company resources and data.
2. Educate all staff on the importance of protecting data and the risks of not doing so.
3. Implement access control procedures such as multi-factor authentication, password complexity requirements, and regular password changes.
4. Implement strong perimeter security measures such as firewalls, intrusion detection systems, and antivirus software.
5. Establish regular auditing and monitoring of the system to detect any unauthorized access or usage of data.
6. Establish a process for responding to security incidents, including reporting, investigation, and remediation.
7. Implement a secure backup and recovery system to protect against data loss.
8. Establish an incident response team to investigate and respond to any security incidents.
9. Regularly review and update the security policies and procedures to ensure compliance with changing regulations.
10. Develop a policy for the secure disposal of confidential data.
To know more about security :
brainly.com/question/28581015
#SPJ4