The session will address best practices in Information Security and Privacy, presenting minimum technical security standards for micro and small companies. ANPD guidelines, good market practices, the experience of European data protection authorities and some relevant data on the subject will be presented.