Paper Chase: The Huge Security Risks Now in Your File Room

Paper Chase: The Huge Security Risks Now in Your File Room

In 1975, an article in BusinessWeek heralded the era of a “paperless office.” Since then, high tech has become a multi-billion-dollar industry that transformed the business by replacing manual processes with electronic communications and data.

But the promise of a paperless office has not been fulfilled, and it probably won’t be anytime soon. The fact is, the paper continues to be a dominant medium for mortgages, legal contracts and several other official documents that need to be carefully reviewed and signed every day. Paper is still a highly integrated part of day-to-day operations across almost every industry. Organizations that don’t take secure storage and the destruction of critical documents seriously are tempting fate.

Many paper documents are subject to strict regulations governing consumer privacy, so businesses can’t just throw them in the trash or recycle bin. The risks and fines related to mismanaging documents are surprisingly high. Additional drawbacks come with improper storage of physical records, such as a damaged reputation and lost customers. These potential firestorms aren’t enough for some organizations. Each day there are new reports of identity theft and personal records found in public places, which is a clear indication that paper documents are not being properly protected.

  • In Texas, Dallas County officials allow paroled prisoners to earn community service time by sorting and shredding confidential documents, such as birth certificates, Social Security cards and medical records for over ten years. The practice is currently under review.
  • In 2010, paper documents from four Massachusetts hospitals were found un-shredded in a public dumping facility. Another Massachusetts hospital admitted that documents containing personal data for over 800,000 people were missing.
  • New York City Police Department records containing sensitive information regarding deployments of weapons of mass destruction task force were found in a Manhattan trash can in 2011.
  • This year, paper votes from eight precincts were not counted in the Iowa Republican caucuses because they were lost for various reasons.

The point is clear: when paper records are not stored or destroyed securely, organizations put themselves in harm’s way. From a financial standpoint, unsecured paper documents can draw incredible fines:

  • Over a two-day period in 2011, the U.S. Department of Health and Human Services, citing the Health Insurance Portability and Accountability Act of 1996 (HIPAA), fined two hospitals a total of $5.3 million for improper paper records management. These were the first two fines ever levied under the regulation.
  • A Florida bank agreed to pay $850,000 to the state and an additional $125,000 to a charitable organization after an employee stole records that included credit card numbers, bank account information and other personal data of 8.5 million customers.

Paper is here to stay, and organizations must do a better job securing documents during the entire span of their lifecycle. Consider the following strategies which will assist in the difficult process of document safety and compliance.

Limit Personnel Access

The area where critical paper documents are stored must be secure on several levels. Personnel access should be limited to only those who truly need the information, and their access should be monitored at all times. Installing facial recognition or vascular scan technologies, PIN-pad processors and swipe card-readers will greatly improve the security of records storage facilities. As the examples above indicated, having the wrong people accessing critical documents can create the potential for financial and reputational disaster.

Invest in Paper-Saving Technology

Documents should also be as safe as possible from elements like fire and water. Investing in fire prevention systems like Very Early Smoke Detection Apparatus (VESDA) and non-water fire suppressant alternatives will further minimize risk to paper records. VESDA, for example, can identify the smoke of a freshly lit cigarette. A recent study found that the average corporation spends $204 for every lost document. In the event of a fire, burst water pipe or natural disaster, those costs can inflate exponentially in a matter of days, even hours.

Consider Moving Records Storage Off-Site

Some organizations do not have space or resources to employ such security measures and store documents off-site. Organizations that choose this strategy should thoroughly investigate the storage provider’s reputation. What security measures do they employ? Who has access to documents, and what is its response time when documents are needed? Is its chain of custody secure, and how are documents destroyed? These are just a few questions that should be answered before handing documents over to a third-party storage provider.

Securely Destroy Unnecessary Documents

After a document’s lifecycle has run its course, it must be properly destroyed. There are countless ways to do away with obsolete paper documents improperly, which can be catastrophic. The same personnel and security considerations taken with storage should apply to destruction. Knowing who is responsible for handling, transporting and destroying is critical to avoiding the nightmares associated with lost documents.

Organizations may rely more heavily on digital solutions than in 1975, but its dependence on paper is still prominent and will continue to be an everyday component of the business landscape. Paper isn’t going anywhere. The question is, “What are you doing with it?”


Source: https://www.forbes.com/sites/ciocentral/2012/03/18/paper-chase-the-huge-security-risks-now-in-your-file-room/?sh=41e878359a17

Call Now Button