Security

Entech's Chris Brenes: How to be Prepared for the FTC Safeguards Rule


Chris Brenes, CISO

Don't Let the FTC Safeguards Rule Catch You Off Guard

At Entech we know that keeping up with regulations can feel like trying to catch a greased pig at a county fair. But fear not, we're here to break down the FTC Safeguards Rule in plain English, with a dash of humor to keep things light.

What is the FTC Safeguards Rule? 

Picture this: The FTC is like a superhero (cape and all), and the Safeguards Rule is its trusty sidekick. Together, they protect the confidentiality and integrity of customer information held by financial institutions. This dynamic duo is part of the Gramm-Leach-Bliley Act (GLBA), which aims to keep consumer financial information safe from the clutches of evildoers (aka data breaches and identity theft). 

The Safeguards Rule requires your company to have a written information security program that is “appropriate to the size and complexity of your business, the nature and scope of your activities, and the sensitivity of the information at issue.”

The FTC Safeguards rule is broad reaching. 

Not only does it affect obvious companies like banks, credit unions, investment firms, and insurance companies – it also applies to other less obvious companies. You may be surprised to learn that it may also apply to auto dealerships, retailers, property management companies, and educational institutions among others. The Rule defines “financial institution” in a much broader way than people may use it in everyday conversation, so don’t assume this rule won’t apply to your business.

Why should you care?

Well, if you're in the financial industry, you're already on the FTC's radar. But even if you're not, adopting a security framework to protect data is like wearing a seatbelt – it's just a good idea. Plus, it shows your customers that you care about their privacy, which is always a win in our book!

So, how can you become the superhero of data protection? 

  1. Develop a comprehensive information security program: Think of it as your superhero suit, tailored to fit your organization's unique needs and risks.

  2. Implement and maintain the program: Like any good superhero, you need to stay vigilant and keep your suit in tip-top shape.

  3. Work with trusted partners: Assemble your own Justice League of IT experts, legal advisors, and third-party vendors to ensure you're always compliant and ready for action.

  4. In conclusion, the FTC Safeguards Rule may not be as exciting as a summer blockbuster, but it's crucial for businesses in the financial sector and a smart move for any industry. So, let's join forces and make data protection our superpower! 

Ready to take the leap?

Contact us today, and together, we'll conquer the world of data security.

Industries Impacted by FTC's New Safeguard Rule and What it Means for your IT Strategy; download the Guide

Chris Brenes
CISO

References:
https://www.ftc.gov/business-guidance/resources/ftc-safeguards-rule-what-your-business-needs-know

https://www.ftc.gov/business-guidance/privacy-security/gramm-leach-bliley-act

Similar posts