Creating a Cybersecurity Program That Complies With the FTC Safeguards Rule

This document explains the FTC Safeguards Rule and provides high-level guidance on building a security program to protect customer financial data, using MITRE ATT&CK to frame risks such as phishing, ransomware, mixed-use endpoints, and cloud data exfiltration. It emphasizes rapid deployment of layered defenses—highlighting Cisco Umbrella capabilities like DNS-layer security, secure web gateway, CASB, DLP, and remote browser isolation—to mitigate foreseeable internal and external threats and support compliance by June 9, 2023.