Most Oregon businesses are still unaware of Oregon's new law to address the rising problem of identity theft and data breaches, the Oregon Identity Theft Protection Act (www.oregonidentitytheftprotectionact.com). Considering that the civil fines start at $1,000 per incident, it is a costly gamble to not become compliant with this new requirement.
The sites www.isecurityconsultants.com and www.isecuritypolicy.com offer a very inexpensive option for businesses to purchase a "turn key" solution for their security documentation. The Information Security Policy Manual covers all the requirements from the Oregon Identity Theft Protection Act and is very easy for employers to purchase and implement.
For those businesses requiring assistance, I would recommend checking out www.portlandmsp.com to learn what local IT professionals can do to help. They offer a complimentary Microsoft Small Business Technology Assessment (MSBTA) that is worth $300. This can assist in identifying your goals for technology and creating a roadmap to get from your current situation to where your technology is an effective tool that truly supports your organization and pays for itself.