The 411

You should have policies and procedures in place to classify the information you collect and store, and how to protect consumer information. All sensitive information entered into your production system should be encrypted when saved. And emails you send that contain sensitive inf0rmation should be encrypted before they are sent.