FTC settlement shows key compliance area
A settlement between the Federal Trade Commission (FTC) and computer vendor Asus shows employers one way to stay on the feds’ good side – act quickly when you receive vulnerability reports.
According to the complaint, Asus misrepresented its security policies, and failed to act on vulnerability reports quickly.
Delayed notification
Specifically, the FTC alleges that Asus took too long to address reported vulnerabilities and notify its customers that the flaws could lead to cyberattacks.
That delay was a key factor in the company’s poor security practices, the FTC said. To settle the suit, Asus has agreed to implement a more thorough security program that fixes these issues, along with other steps.
To keep out of federal regulator’s crosshairs, be sure you have solid procedures to address vulnerabilities and notify consumers if those flaws could endanger their data security.
Free Training & Resources
Further Reading
Mastering the basics of Excel is the gateway to understanding more advanced features. Starting with basic cells and progressing to Pivot Ta...
The Financial Accounting Standards Board (FASB) is calling on publicly traded companies to report employee compensation. And that’s n...
Finding and securing talent is always at or near the top of CFOs’ list of concerns. Could removing college degree requirements from ...
A missed federal payroll tax deposit can trigger hefty penalties — they just went up on July 1. But a new IRS program could provid...
Ever wondered why Excel features a currency format as well as an accounting format? You’re not alone. The reason is, creating Exce...
Brace yourself: About a third of accountants are making multiple errors every week. Fifty-nine percent are goofing up on a monthly basis, i...