{"id":1273,"date":"2023-04-06T08:00:00","date_gmt":"2023-04-06T08:00:00","guid":{"rendered":"https:\/\/umbrella-staging.marketops.umbrella.com\/?p=67004"},"modified":"2023-06-06T23:55:01","modified_gmt":"2023-06-06T23:55:01","slug":"ftc-safeguards-rule-get-compliant-and-get-on-with-business","status":"publish","type":"post","link":"https:\/\/ddi.mohflo.net\/index.php\/2023\/04\/06\/ftc-safeguards-rule-get-compliant-and-get-on-with-business\/","title":{"rendered":"FTC Safeguards Rule: Get Compliant and Get on With Business"},"content":{"rendered":"<p>Are you writing loans at your car dealership, printing checks, issuing your own store credit card \u2014 or otherwise handling consumer financial data? You may not consider yourself a \u201cfinancial institution\u201d \u2014 but the U.S. Federal Trade Commission (FTC) sure does. FTC is classifying countless companies as a \u201cnon-banking financial institutions\u201d subject to its revised Safeguards Rule cybersecurity regulation.<\/p>\n<p>Confused? Concerned? Cisco is here to <a href=\"https:\/\/learn-cloudsecurity.cisco.com\/umbrella-resources\/umbrella\/ftc-safeguards-compliance-at-a-glance?utm_medium=web-referral&amp;utm_source=blog&amp;utm_campaign=UMB-FY23-Q3-ftc-safeguards-rule-get-compliant-get-on-with-business&amp;utm_term=pgm&amp;utm_content=umb-fy23-q3-infographic-ftc-compliance-at-a-glance\">help you get compliant<\/a>.<\/p>\n<h2 id=\"h-what-is-the-revised-ftc-safeguards-rule\">What is the revised FTC Safeguards Rule?<\/h2>\n<p>The FTC has stated that the Revised Safeguards Rule \u201cprovides more concrete guidance for businesses.\u201d It mandates financial institutions establish and maintain a robust data security program, safeguarding sensitive customer information, including \u201cnon-public personal information.\u201d<\/p>\n<p>Among other things, the revised Safeguards Rule requires:<\/p>\n<ol type=\"1\">\n<li>Planning and action to address \u201creasonably foreseeable internal and external risks\u201d \u2013 in other words, protection against data breaches, data leakage, phishing, and ransomware<\/li>\n<li>Implementation of multifactor authentication<\/li>\n<\/ol>\n<h2 id=\"h-who-does-the-revised-ftc-safeguards-rule-apply-to\">Who does the revised FTC Safeguards Rule apply to?<\/h2>\n<p>The Safeguards Rule originally applied to organizations significantly engaged in financial activities, like banks. With the revision, the FTC\u2019s expanded definition also includes businesses involved in \u201cactivities incidental to such financial activities.\u201d This change has significantly broadened the scope of businesses that must comply.<\/p>\n<p>Businesses classified by FTC as \u201cfinancial institutions\u201d include:<\/p>\n<div class=\"is-nowrap is-layout-flex wp-container-5 wp-block-group\">\n<div class=\"is-layout-flex wp-container-4 wp-block-columns\">\n<div class=\"is-layout-flow wp-block-column\">\n<ul>\n<li>Auto dealers<\/li>\n<li>Retailers providing store credit<\/li>\n<li>Investment advisors<\/li>\n<\/ul>\n<\/div>\n<div class=\"is-layout-flow wp-block-column\">\n<ul>\n<li>Mortgage brokers<\/li>\n<li>Real estate appraisers<\/li>\n<li>Real estate settlement services<\/li>\n<\/ul>\n<\/div>\n<div class=\"is-layout-flow wp-block-column\">\n<ul>\n<li>Accountants and tax preparers<\/li>\n<li>Check cashiers, money wirers<\/li>\n<li>Consumer check printers and sellers<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<\/div>\n<p>The Code of Federal Regulations provides an <a href=\"https:\/\/www.ecfr.gov\/current\/title-16\/chapter-I\/subchapter-C\/part-314\/section-314.2#p-314.2(h)(2)(i)\" target=\"_blank\" rel=\"noreferrer noopener\">expanded list of covered organizations<\/a>.<\/p>\n<h2 id=\"h-how-cisco-s-cloud-native-security-can-help\">How Cisco\u2019s cloud-native security can help<\/h2>\n<p>Cisco\u2019s cloud-native security simplifies deployment, so you can deliver concrete results and quickly meet FTC Safeguards Rule requirements. Together, Cisco Umbrella and Cisco Duo provide robust converged threat defense and <a href=\"https:\/\/duo.com\/product\/multi-factor-authentication-mfa\" target=\"_blank\" rel=\"noreferrer noopener\">multi-factor authentication (MFA)<\/a> to strengthen your security posture, pass audits, and delight your end-users. Cisco Security operates at the speed of business, improving network performance, protecting users both when they\u2019re on and off the network, and authenticating them without impeding work.<\/p>\n<h2 id=\"h-start-getting-compliant-in-24-hours-and-stay-that-way\">Start getting compliant in 24 hours \u2013 and stay that way<\/h2>\n<p>With just two clicks, you can start demonstrating your commitment to FTC Safeguards Rule compliance, taking advantage of Umbrella\u2019s foundational <a href=\"https:\/\/umbrella.cisco.com\/products\/dns-layer-network-security\">DNS-layer security<\/a>. Umbrella blocks web threats and malicious IPs, mitigating risks and reducing security alerts by up to 70% before they even hit your firewall.<\/p>\n<p>As you hone your threat model, you\u2019ll find Umbrella and Duo great partners for your security journey. Umbrella\u2019s capabilities are tightly integrated in a single manager, and include:<\/p>\n<p>Each Umbrella component emphasizes ease-of-use and effectiveness. For instance, Umbrella features the industry\u2019s only DLP that consolidates in-line and cloud DLP policies and logging, saving you time and ensuring greater visibility.<\/p>\n<figure class=\"wp-block-image size-full\"><a href=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2023\/06\/ftc-safeguards-rule-get-compliant-and-get-on-with-business.png?ssl=1\"><img data-recalc-dims=\"1\" fetchpriority=\"high\" decoding=\"async\" width=\"640\" height=\"296\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2023\/06\/ftc-safeguards-rule-get-compliant-and-get-on-with-business.png?resize=640%2C296&#038;ssl=1\" alt=\"Cisco Umbrella SSE and SASE security components, which include: DNS-layer security, cloud-delivered firewall (CDFW), Cisco Talos Threat Intelligence, Secure Web Gateway (SWG), Remote Browser Isolation (RBI), and Cloud Access Security Broker (CASB). CASB includes the following functionality: app discovery and control, cloud malware detection, and data loss prevention (DLP). \" class=\"wp-image-65959\" srcset=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2023\/06\/ftc-safeguards-rule-get-compliant-and-get-on-with-business.png 870w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2023\/06\/ftc-safeguards-rule-get-compliant-and-get-on-with-business-1.png 300w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2023\/06\/ftc-safeguards-rule-get-compliant-and-get-on-with-business-2.png 768w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2023\/06\/ftc-safeguards-rule-get-compliant-and-get-on-with-business-3.png 325w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2023\/06\/ftc-safeguards-rule-get-compliant-and-get-on-with-business-4.png 649w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2023\/06\/ftc-safeguards-rule-get-compliant-and-get-on-with-business-5.png 200w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2023\/06\/ftc-safeguards-rule-get-compliant-and-get-on-with-business-6.png 400w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2023\/06\/ftc-safeguards-rule-get-compliant-and-get-on-with-business-7.png 520w\" sizes=\"(max-width: 870px) 100vw, 870px\"><\/a><\/figure>\n<p>Considering working with a managed security provider (MSP\/MSSP\/MDR)? Insist upon one of the hundreds supporting Umbrella because its rich API streamlines management and enables efficient orchestration.<\/p>\n<h2 id=\"h-protect-your-reputation-and-bottom-line-with-leading-threat-defense\">Protect your reputation \u2013 and bottom line \u2013 with leading threat defense<\/h2>\n<p>This year, Forrester Consulting independently interviewed multiple organizations to determine Umbrella\u2019s return on investment in the real world. <a href=\"https:\/\/umbrella.cisco.com\/blog\/cisco-umbrella-delivered-better-cybersecurity-231-percent-roi?utm_medium=web-referral&amp;utm_source=blog&amp;utm_campaign=UMB-FY23-Q3-ftc-safeguards-rule-get-compliant-get-on-with-business&amp;utm_term=pgm&amp;utm_content=UMB-FY23-Q3-cisco-umbrella-delivered-better-cybersecurity-231-percent-roi\">Forrester quantitively measured<\/a> that Umbrella\u2019s average payback period is less than twelve months \u2014 driven in great part by its security effectiveness.<\/p>\n<p>Every day, over 400 researchers and analysts in the Cisco Talos threat intelligence team deliver updates to Umbrella to fight the latest threats. Additionally, Umbrella\u2019s built-in data identifiers contribute to <a href=\"https:\/\/umbrella.cisco.com\/solutions\/ftc-safeguards-rule-compliance-2023\">compliance with the FTC Safeguards Rule<\/a>. They mitigate exfiltration of consumer financial data including U.S. persons names, bank routing and account information, credit cards, and Social Security and driver\u2019s license numbers.<\/p>\n<p>Additional third-party validation includes:<\/p>\n<h2 id=\"h-defeat-hackers-improve-user-experience\">Defeat hackers, improve user experience<\/h2>\n<p>Umbrella and Duo are critical to FTC Safeguards Rule compliance. Together, they help protect every managed and unmanaged device and every application, allowing your users to continue working with the tools they love, anywhere, anytime. Cisco proactively identifies malicious IPs and the user device health and security posture, only permitting access when the requirements you set are met.<\/p>\n<p>We never forget that availability and uptime are essential security attributes. Our highly redundant infrastructure, which has maintained continuous DNS uptime since 2006, ensures your organization stays connected and protected. You can <a href=\"https:\/\/status.umbrella.com\/#\/\">see our uptime data<\/a> for yourself.<\/p>\n<h2 id=\"h-we-re-here-to-help-you-meet-the-2023-ftc-safeguards-rule-deadline\">We\u2019re here to help you meet the 2023 FTC Safeguards Rule deadline<\/h2>\n<p>When you choose Umbrella, you\u2019re joining 26,000+ other Umbrella customers that have enhanced their security posture while meeting multiple audit requirements.<\/p>\n<p>See for yourself! <a href=\"https:\/\/umbrella.cisco.com\/cisco-umbrella-studio\">Join a free Umbrella Studio workshop<\/a> to:<\/p>\n<ul>\n<li>Discover how Umbrella can address the use cases that matter to you<\/li>\n<li>Learn how to configure and deploy Umbrella<\/li>\n<li>Earn awards by completing fun challenges<\/li>\n<\/ul>\n<p>Content is provided in a step-by-step format with self-contained lab resources each participant can use to deploy Umbrella in their own virtual environment. To learn more about how to comply with the FTC Safeguards Rule, check out our <a href=\"https:\/\/learn-cloudsecurity.cisco.com\/umbrella-resources\/umbrella\/ftc-compliance-infographic?utm_medium=blog&amp;utm_source=cisco-umbrella&amp;utm_campaign=UMB-FY23-Q3-%20ftc-safeguards-rule-get-compliant-get-on-with-business&amp;utm_term=pgm&amp;utm_content=umb-fy23-q3-content-infographic-ftc-compliance-infographic\">infographic on FTC Safeguards Rule Compliance<\/a> or download our <a href=\"https:\/\/learn-cloudsecurity.cisco.com\/umbrella-resources\/umbrella\/ftc-safeguards-compliance-at-a-glance?utm_medium=blog&amp;utm_source=cisco-umbrella&amp;utm_campaign=UMB-FY23-Q3-%20ftc-safeguards-rule-get-compliant-get-on-with-business&amp;utm_term=pgm&amp;utm_content=umb-fy23-q3-infographic-ftc-compliance-at-a-glance\">At-a-Glance Compliance Guide<\/a>.<\/p>\n<p><a href=\"https:\/\/umbrella.cisco.com\/blog\/ftc-safeguards-rule-get-compliant-get-on-with-business\">Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Are you writing loans at your car dealership, printing checks,<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[120,121,96],"tags":[122,123,100],"class_list":["post-1273","post","type-post","status-publish","format-standard","hentry","category-compliance","category-ftc-safeguards-rule","category-spotlight","tag-compliance","tag-ftc-safeguards-rule","tag-spotlight"],"featured_image_urls":{"full":"","thumbnail":"","medium":"","medium_large":"","large":"","1536x1536":"","2048x2048":"","chromenews-featured":"","chromenews-large":"","chromenews-medium":""},"author_info":{"display_name":"Umbrella","author_link":"https:\/\/ddi.mohflo.net\/index.php\/author\/umbrella\/"},"category_info":"<a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/compliance\/\" rel=\"category tag\">compliance<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/ftc-safeguards-rule\/\" rel=\"category tag\">FTC Safeguards Rule<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/spotlight\/\" rel=\"category tag\">Spotlight<\/a>","tag_info":"Spotlight","comment_count":"0","jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/1273","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/comments?post=1273"}],"version-history":[{"count":1,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/1273\/revisions"}],"predecessor-version":[{"id":1368,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/1273\/revisions\/1368"}],"wp:attachment":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/media?parent=1273"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/categories?post=1273"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/tags?post=1273"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}