What the FTC Safeguards Rule requires of tax preparers, CPAs, family offices and other non-bank financial firms: a Qualified Individual, MFA, testing and breach notice.
Year-end sales events push more credit applications through the F&I office than any other time of year. What the FTC Safeguards Rule requires auto dealers to do with that data, and what to check before the rush.
Cybersecurity for accountants starts with the workstation. Three Microsoft support dates landed this fall and filing season opens in late January. A pre-season checklist mapped to IRS Publication 4557, the Security Six and the FTC Safeguards Rule.
CSF 2.0 added a sixth function, Govern, that makes cybersecurity a leadership responsibility. Here is what its six categories ask for, how they line up with board reporting duties, and a simple way to put them into practice.
CIS IG1 is 56 safeguards that the Center for Internet Security calls the minimum standard of information security. Here is what they cover, why California regulators point to them, and how to work through them in order.
Every PTIN renewal includes a data security acknowledgment on Form W-12. Here is what the line says, why the FTC Safeguards Rule makes a WISP mandatory for tax practices, and what to check before your preparers renew.
The FTC Safeguards Rule requires a written report to the board at least once a year. Here is what the rule says it must cover, who is exempt, and how to build a report the board can act on.
Regulation S-P does not name who must sign off on a firm's program, and the SEC said so explicitly when it declined to designate who must undertake oversight responsibilities. Here is who ends up owning it anyway, and what an examiner will actually ask to see.
One question to ask yourself
In 30 minutes, we talk through your setup and you leave knowing which plan fits.
Book a callSee exactly what you'd receive each quarter, by email.
Get the sample Posture Report by email