Free download
Safeguards Rule Readiness Checklist
Find out where your business stands in about 15 minutes. Two pages, every requirement of 16 CFR 314.4 in plain English, and a scoring guide that shows what to fix first.
- 23 checks mapped to the rule
- Flags the requirements businesses most often miss
- The FTC's 30-day breach reporting rule, explained
- Versions for car dealerships and tax firms
What's inside
Eight areas the FTC expects to see
1
Leadership
A Qualified Individual designated in writing, and the annual report.
2
Risk assessment
A written assessment covering every system that holds customer data.
3
Safeguards
MFA, encryption, access control, disposal, logging and more.
4
Testing
Continuous monitoring, or annual pen tests plus six-month scans.
5
Training
Security awareness for every employee.
6
Vendors
Contracts and ongoing oversight of everyone with access.
7
Keeping it current
Updating the program as your business changes.
8
Incidents
A written response plan, and the 30-day FTC notice.