FTC Cybersecurity Risk Management Guidelines – Better Data Protection Can Equal Reduced Chance Of Enforcement Actions

Since the 9/11 attacks, the National Institute of Standards and Technology (NIST) has worked to help government and businesses improve critical technology infrastructure. The NIST Framework for Improving Critical Infrastructure Cybersecurity, released in 2014, outlines resources and processes to help prevent attacks and lower the risks to both organizations and consumers.

On August 31, 2016, the FTC (Federal Trade Commission), which includes a focus on data security in the private sector through civil law enforcement and education among its duties, discussed how the NIST Cybersecurity Framework (discussed in my 2014 article) relates to the FTC's mission and enforcement actions.