Legal Liability

LinkedIn Post 14: Legal Liability

What happens when PSTI enforcement action targets your FM company?

Possible outcomes:

• ICO enforcement notice requiring removal of non-compliant devices

• Liability for replacement or remediation costs

• Reputational damage and disputes with building owners

• Uncertainty about future operations and liability exposure

The best defense is documentation:

• Inventory of devices and PSTI classification

• Procurement standards requiring security compliance

• Credential management policies and audit trails

• Vulnerability coordination process with response timelines

• Lifecycle plan for managing end-of-life devices

This documentation demonstrates to regulators that you've taken PSTI seriously and implemented reasonable controls.

Without documentation, you're defending against enforcement action with "we hope we did the right thing."

With documentation, you're defending with "here's what we did and why."

Documentation is your liability insurance.

#PSTI #Liability #LegalRisk #Compliance