The Canadian Institute of Chartered Accountants (CICA) has created a toolkit to help organizations identify data security and privacy risks.

“The Canadian Privacy and Data Security Toolkit for Small and Medium Enterprises” includes a risk self-assessment, advice on area-specific risks, and a CD-ROM with checklists, articles and training templates, and a customizable privacy policy.

 “Toolkits like these can serve as valuable resources for small- and medium-sized enterprises,” writes Canadian Privacy Commissioner Jennifer Stoddard in the foreword, adding that “…all organizations need to develop and maintain strong privacy policies and procedures for the protection of personal information and data security, before a privacy breach occurs.”