Written Information Security Program (WISP)

A written information security program, or WISP, is the cornerstone of an information governance program. It can assist organizations in mitigating the risk of a cyberattack or the inadvertent disclosure of sensitive information and may also provide a legal defense for data breach-related claims. Pursuant to Ohio’s cybersecurity safe harbor law (2018 SB 220), implementing and maintaining a WISP can provide businesses with an affirmative defense against certain claims alleging that a failure to implement and maintain reasonable security standards resulted in a data breach.

An organization may also be required by data protection laws and regulations to execute a WISP to protect health and medical data, or other types of personally identifiable information.

Thompson Hine can assist your organization with drafting a comprehensive WISP that satisfies Ohio’s cybersecurity safe harbor law or other legal requirements.

WISP Framework

If your organization has suffered a data breach or incident, please contact us at any time (24/7) at DataBreachResponse@ThompsonHine.com or fill out our online form below.

Have a question regarding privacy or cybersecurity issues?

Name*

First

Last

Company Name*

Address

Street Address

Address Line 2

City

State / ProvinceSelectAlabamaAlaskaArizonaArkansasCaliforniaColoradoConnecticutDelawareFloridaGeorgiaHawaiiIdahoIllinoisIndianaIowaKansasKentuckyLouisianaMaineMarylandMassachusettsMichiganMinnesotaMississippiMissouriMontanaNebraskaNevadaNew HampshireNew JerseyNew MexicoNew YorkNorth CarolinaNorth DakotaOhioOklahomaOregonPennsylvaniaRhode IslandSouth CarolinaSouth DakotaTennesseeTexasUtahVermontVirginiaWashingtonWest VirginiaWisconsinWyomingDistrict of ColumbiaPuerto RicoU.S. Virgin IslandsGuamAmerican SamoaNorthern Mariana IslandsMarshall IslandsMicronesiaPalau

ZIP / Postal Code

Phone*

Email*

Area(s) of Concern

Phishing

Data Breach

Malware

Ransomware

Other

Comments:

Submit

We respect your privacy. For a summary of what information we collect about you, the limited times when we may share it with others, and how we protect your privacy, please click on “Privacy Policy”.