The Agents Council for Technology (ACT) has released a prototype agency information security plan to assist agencies and brokerages in creating their own written security plans.

The plan's aim is to safeguard the private information of an agency's clients and employees, the agency's proprietary and confidential information, the physical security of the agency's premises and the integrity of electronic systems so that they function smoothly and without interruption.

"Numerous state privacy and security breach notification laws, as well as several federal laws, require agents to have written security plans to protect their operations and the privacy of their clients' and employees' private information," said Steve Aronson, president of Aronson Insurance in Newton & Needham, Mass. and chairman of the ACT Agency Security Best Practices Work Group that produced the plan.

"Not only could a breach of clients' private information devastate an agency's reputation; it is likely to result in the agency's having to undertake extremely time consuming and costly actions on behalf of the individuals whose private information may have been compromised."

Jeff Yates, ACT executive director, added, "Having a sound written information security plan is an essential risk management tool for every independent agency. We wanted to provide agencies with a free tool they could customize to fit the size and complexity of their own operations."

The plan, according to ACT, protects private information in any form, whether it is voice, electronic or paper, and contains additional tips agents should keep in mind as they customize the plan, along with links to various laws that may apply and additional resources that are available.

Mr. Yates pointed out that this is only the first step in a comprehensive security plan. Agents also need to appoint an information security coordinator to oversee the plan and establish procedures, workflows, training, monitoring, auditing, law and plan reviews to carry it out fully.

Agents and other industry participants can visit the ACT website to download the free prototype agency information security plan.