The Identity Theft Resource Center (ITRC) has put together a guide for protecting against identity theft for small and mid-sized businesses (SMBs).
Given that the collection of personally identifiable information is often a requirement for businesses, it's important to take steps to protect that information - and yourself - against possible data breaches. The guide recommends a 6 point approach to data and data security:
Many of these steps may seem obvious, but it's important to regularly look at these points to ensure that you are always on top of changes and are keeping your data policies in line. It's easy for SMBs to get bogged down with the management of the day-to-day running of the business and forget to lay down these important policies.