Information Security Program Requirements

The Information Security Program Requirements under the FTC Safeguards Rule (16 CFR § 314) mandate that covered businesses develop and maintain a written security program that addresses risk assessment, employee training, access controls, data encryption, monitoring, and incident-response procedures to protect customer personal information.