![\"A](\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2023\/06\/creating-a-cybersecurity-program-that-complies-with-the-ftc-safeguards-rule.jpg?resize=640%2C317&ssl=1\")
<\/a><\/figure>\nThese businesses covered by the FTC Safeguards Rule are required to develop, implement, and maintain a comprehensive security program to protect their customer\u2019s information. <\/p>\n
This program should have the following objectives:<\/p>\n
- \n
- Ensure the security and confidentiality of customer information<\/li>\n
- Protect against anticipated security threats<\/li>\n
- Protect against unauthorized access to customer information<\/li>\n<\/ul>\n
It\u2019s important to remember the Safeguards Rule requires mitigation of \u201creasonably foreseeable internal and external risks\u201d \u2013 in other words, protection against data breaches, data leakage, phishing, and ransomware.<\/p>\n
That\u2019s good business practice anyway. If your day-to-day business is operational and productive and not offline due to a malware attack, then your business can achieve its goals, whether those are profit, growth, long-term wealth for you and your employees, or solving customer problems. <\/p>\n
Developing a cybersecurity program<\/h2>\n
Practical steps your business can take immediately to develop a comprehensive security program include deploying a flexible product like Cisco Umbrella that allows you to quickly deploy DNS-layer security<\/a> in 24 hours to begin demonstrating compliance. Umbrella also allows you to incrementally deploy additional layers of protection to comprehensively address both compliance and security needs, leveraging features like:<\/p>\n
All of these solutions are managed from a single browser interface.<\/p>\n
![\"A](\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2023\/06\/creating-a-cybersecurity-program-that-complies-with-the-ftc-safeguards-rule-1.jpg?resize=640%2C351&ssl=1\")
<\/figure>\nBut how to begin identifying those risks for the security program required by the FTC Safeguards Rule<\/a>? One method is to leverage the MITRE ATT&CK framework, a global knowledge base of adversary tactics and techniques based on real-world observations. <\/p>\n
Using MITRE ATT&CK as a frame of reference, here are a few key risks that may be important to include in your FTC Safeguards Rule security program, with specific Cisco Umbrella way to mitigate them:<\/p>\n
Mixed-mode workstation risks<\/h3>\n
\n