Questions & Answers

How do you Comply with the Safeguards Rule?

How do you Comply with the Safeguards Rule? The Safeguards Rule requires companies to develop a written information security plan that describes their program to protect customer information. The plan must be appropriate to the company’s size and complexity, the nature and scope of its activities,...

How do you Secure Information according to the Safeguards Rule?

How do you Secure Information according to the Safeguards Rule? The Safeguards Rule requires companies to assess and address the risks to customer information in all areas of their operation, including three areas that are particularly important to information security: Employee Management and...

What are Protected Computers according to the Computer Fraud and Abuse Act of 1984 ("CFAA")?

What are Protected Computers according to the Computer Fraud and Abuse Act of 1984 ("CFAA")? The CFAA governs cases involving protected computers, which are defined as computers that are: • Exclusively used by a financial institution or the US government. • Not covered by the above, but: • are used...

What are the Elements Required for your Information Security Program in the Safeguards Rule?

What are the Elements Required for your Information Security Program in the Safeguards Rule? §314.4 Elements. In order to develop, implement, and maintain your information security program, you shall: (a) Designate an employee or employees to coordinate your information security program. (b)...

What are the Penalties according to the Computer Fraud and Abuse Act of 1984 ("CFAA")?

What are the Penalties according to the Computer Fraud and Abuse Act of 1984 ("CFAA")? The penalties for committing CFAA offenses range between: • Imprisonment for up to one year for simple cyber trespassing. • A maximum of life imprisonment when death results from intentional computer damage. The...

What are the Prohibited Acts according to the Computer Fraud and Abuse Act of 1984 ("CFAA")?

What are the Prohibited Acts according to the Computer Fraud and Abuse Act of 1984 ("CFAA")? The CFAA prohibits: • Computer trespassing, for example, hacking, in a government computer. • Computer trespassing that exposes certain government, credit, financial, or computer-housed information. •...

What are the Standards for Safeguarding Customer Information in the Safeguards Rule?

What are the Standards for Safeguarding Customer Information in the Safeguards Rule? §314.3 Standards for safeguarding customer information. (a) Information security program. You shall develop, implement, and maintain a comprehensive information security program that is written in one or more...

What is the Computer Fraud and Abuse Act of 1984 ("CFAA")?

What is the Computer Fraud and Abuse Act of 1984 ("CFAA")? The CFAA is the main federal criminal statute regulating hacking and other computer crimes. It amends the Federal criminal code to establish a federal offense of using a computer without authorization or using a computer with authorization...

What is the Safeguards Rule?

What is the Safeguards Rule? The Safeguards Rule requires financial institutions under FTC jurisdiction to have measures in place to keep customer information secure. In addition to developing their own safeguards, companies covered by the Rule are responsible for taking steps to ensure that their...

Who must Comply according to the Safeguards Rule?

Who must Comply according to the Safeguards Rule? The definition of “financial institution” includes many businesses that may not normally describe themselves that way. In fact, the Rule applies to all businesses, regardless of size, that are “significantly engaged” in providing financial products...

Search form

Search form

Search form

Questions & Answers

Sign Up For Our Newsletter