Careers

Diversity, Equity & Inclusion

Experience

Innovation

Interactive Maps

Locations

About

Pages

Meet our team of innovators
Ask us how we do it

Professionals

Insights

Services

Home | Thompson Hine LLP

Atlanta

Chicago

Cincinnati

Cleveland

Columbus

Dayton

Los Angeles

Minneapolis

New York

Washington, D.C.

A written information security program, or WISP, is the cornerstone of an information governance program. It can assist organizations in mitigating the risk of a cyberattack or the inadvertent disclosure of sensitive information and may also provide a legal defense for data breach-related claims. Pursuant to <strong>Ohio’s cybersecurity safe harbor law (2018 SB 220)</strong>, implementing and maintaining a WISP can provide businesses with an <strong>affirmative defense</strong> against certain claims alleging that a failure to implement and maintain reasonable security standards resulted in a data breach.

contentpilot/introduction

An organization may also be required by data protection laws and regulations to execute a WISP to protect health and medical data, or other types of personally identifiable information.

core/paragraph

Thompson Hine can assist your organization with drafting a comprehensive WISP that satisfies Ohio’s cybersecurity safe harbor law or other legal requirements.

core/heading

core/block

core/column

core/columns

Have a question regarding privacy or cybersecurity issues? Fill out our online form.

Have a question regarding privacy or cybersecurity issues?

gravityforms/form

contentpilot/accordion

core/image

written information security program (WISP)

Practices

Test Service SA

Written Information Security Program (WISP)

Popup

Clients

Distinctions

Publications

Resources

Leader