FTC settlement shows key compliance area
A settlement between the Federal Trade Commission (FTC) and computer vendor Asus shows employers one way to stay on the feds’ good side – act quickly when you receive vulnerability reports.
According to the complaint, Asus misrepresented its security policies, and failed to act on vulnerability reports quickly.
Delayed notification
Specifically, the FTC alleges that Asus took too long to address reported vulnerabilities and notify its customers that the flaws could lead to cyberattacks.
That delay was a key factor in the company’s poor security practices, the FTC said. To settle the suit, Asus has agreed to implement a more thorough security program that fixes these issues, along with other steps.
To keep out of federal regulator’s crosshairs, be sure you have solid procedures to address vulnerabilities and notify consumers if those flaws could endanger their data security.
- Share on
Free Training & Resources
Webinars
Provided by SkyStem
Further Reading
Late or slow payments continue to stall progress for today’s finance teams. These delays often stem from large organizations renegotiatin...
Businesses are looking for competent number-crunchers. Some are even desperate to find talent. But the next wave of finance professionals i...
The IRS is extending an olive branch to businesses that received tax credits related to COVID-19 in error. The tax cops are launching a ...
The majority of publicly traded companies say they will continue to voluntarily report greenhouse gas (GHG) emissions that are linked by ma...
The Financial Accounting Standards Board (FASB) is requiring public companies to disclose expense details involving employee compensation, ...
If you’ve used Excel to create a database table with fixed formulas, and that table will be used by multiple people, there’s a ...
