90 Second Safeguards

Safeguards Rule Enforcement Extension

Did the FTC delay enforcement of all the rule's requirements? Or just a few? Sadly it was just a few. Let's look at what the FTC postponed.

Draft an Incident Response Plan

What do you do in the aftermath of a “security event?" The answer to that question must be set forth in a written Incident Response Plan.

Oversee Service Providers

The Safeguards Rule requires you to oversee your service providers. There are four subparts to this requirement.

Implement Policies and Procedures for Personnel to Implement your ISP

The greatest threat to customer data security is located between the monitor and the chair – in other words, your own employees.

Regularly Test Program Effectiveness

Regular testing and evaluation of your Information Security Program is a must.

Mandatory Safeguards: Disposal Procedures, Change Management Procedures, Monitoring and Logging

In this episode Jim discusses Disposal Procedures, Change Management Procedures, and Monitoring and Logging/

Mandatory Safeguards: Access Controls, Systems Inventory, Secure Development Practices

Under the revised FTC Safeguards Rules certain safeguards have become Mandatory. In this episode, Jim discusses some of more mandatory safeg

Mandatory Safeguards: Encryption, MFA, and Continuous Monitoring

In this article we discuss 3 more mandatory safeguards under the revised Rule: Encryption, MFA, and Continuous Monitoring.

Mandatory Safeguards: Risk Assessment and System Inventory

Once a QI has been designated, that person’s first task should be to conduct a Risk Assessment. A Risk Assessment is an evaluation of the in

The Qualified Individual: What is it and Who Should it Be?

What is the Qualified Individual under the revised FTC Safeguard Rule? Who should dealerships designate as their QI?

Why Comply? 3 Reasons Dealers Should Comply with the Revised FTC Safeguards Rule

Why Comply? 3 Reasons Dealers should comply with the Revised FTC Safeguards Rule