FTC Safeguards Rule Questionnaire

Company Name *

How many workstations/laptops do you have? *

How many servers do you have? *

Number of employees with email and/or access to customer information: *

Number of Locations *

Is your organization considered a Financial Institution? *

Do you currently have an internal IT Dept or a Managed Service Provider for your helpdesk? *

Do you have more than 5,000 Customer Accounts? *

Do you have an updated Information Security Program (ISP) detailing how you are meeting the FTC Safeguard requirements? *

Have you designated a qualified individual responsible for overseeing and implementing the ISP? *

Do you perform reoccurring risk assessments annually or more often? *

Do you have an up-to-date inventory of your personnel, devices, systems, and facilities? *

Do you store customer information on your devices? *

Have you Implemented Multi-Factor Authentication? *

Do you have a process for secure disposal of customer information? *

Do you periodically review your data retention policy? *

Do you regularly test and monitor the effectiveness of your security controls? *

Do you perform vulnerability scanning every six months? *

Do you perform an annual penetration test? *

Do you have a Security Awareness Training program for all employees? *

Do you know if your 3rd party vendors are compliant with the FTC Safeguards? *

Do you have a written incident response plan? *

Do you have a qualified individual to report in writing, regularly to board of directors or equivalent? *