FTC settlement shows key compliance area
A settlement between the Federal Trade Commission (FTC) and computer vendor Asus shows employers one way to stay on the feds’ good side – act quickly when you receive vulnerability reports.
According to the complaint, Asus misrepresented its security policies, and failed to act on vulnerability reports quickly.
Delayed notification
Specifically, the FTC alleges that Asus took too long to address reported vulnerabilities and notify its customers that the flaws could lead to cyberattacks.
That delay was a key factor in the company’s poor security practices, the FTC said. To settle the suit, Asus has agreed to implement a more thorough security program that fixes these issues, along with other steps.
To keep out of federal regulator’s crosshairs, be sure you have solid procedures to address vulnerabilities and notify consumers if those flaws could endanger their data security.
Free Training & Resources
White Papers
Provided by Anaplan
White Papers
Provided by Personify Health
Further Reading
You can’t be too careful out there! Fraud is a risk in every area of finance — even the auditor hired to analyze data and file ...
Artificial Intelligence (AI) is perfect for a range of Finance tasks. Billing, analysis data processing and other mundane but critical duti...
The Securities and Exchange Commission (SEC) just fined a company $35 million because it didn’t maintain adequate disclosure rules fo...
Year-end close is when many finance teams are vulnerable to burnout from a seemingly endless, high-priority to-do list of generating annual...
One-week paycheck delays would leave nearly eight in 10 U.S. workers scrambling to cover bills, according to PayrollOrg’s 2025 Getting Pa...
Managing cash flow is one of the most pressing challenges finance teams contend with. T&E programs are a large and variable part of com...