The Federal Trade Commission (FTC) recently issued complicated new amendments to its Safeguards Rule, which require auto dealers to undertake a series of procedural, technical, and contractual steps to protect consumer and other personal data. The amended Rule’s requirements had an original deadline of Dec. 9, 2022, but the FTC has extended that until June 9, 2023, for some of the updated requirements of the Safeguards Rule.
With Cyberator GRC solution and our expert guidance, you will be able to become compliant in a short time. We can help with the following:
- Be your designated Qualified Individual to implement and supervise your information security program.
- Conduct a security risk assessment.
- Help design and implement safeguards to control the risks identified. Including:
- Implement and periodically review access controls.
- Know what you have and where you have it.
- Assist with encrypting customer information on your system and when it’s in transit.
- Assess your apps.
- Assist with implementing multi-factor authentication for anyone accessing customer information on your system.
- Assist with disposing of customer information securely.
- Anticipate and evaluate changes to your information system or network.
- Assist with maintaining a log of authorized users’ activity and keep an eye out for unauthorized access.
- Regularly monitor and test the effectiveness of your safeguards.
- Train your staff.
- Keep your information security program current.
- Create a written incident response plan.
- Assist with reporting to your Board of Directors.