Physical Access Control:
Our business office has a layer of physical security which includes key locks. Our computers are all password protected. Each user has their own username and use strong passwords. Should a member of staff leave the organisation or is absent for long period there access to our systems is cancelled. Our network files are all synced to the Google Cloud to enable our employees to also access them remotely. This is protected by a 2 step verification process and all remote computers are also password protected.
All equipment used has antivirus regularly scanning the network to prevent and detect threats. There is security built into the operating system preventing outside access, and all major security patches are tested and applied within 2 weeks of release.
Where we might have taken physical notes at a meeting these are immediately shredded after use after transferring the information to our CRM.