Addressing the FTC Safeguards Rule – One Requirement at a Time

The new Safeguards Rule mandates nine requirements to help make your business become defensible from cyberattacks that may leave your financial data at risk – and the deadline is quickly approaching.

3/14/2022 10:30 A.M.

That deadline is June 9, 2023, and with only three months left to become compliant, TPx can provide helpful solutions to help your business become defensible.

We know that so many new requirements are overwhelming, and that’s why we suggest getting started right away.

ACA International has tapped TPx as its Safeguards Security Partner of Choice. Here’s how we would tackle some of the Safeguards Rule requirements.

  • Identify an organization to head up your cybersecurity program. If you don’t have a qualified individual to own the program, TPx can act as the owner of your program. TPx can define, create, maintain and report on the program per FTC Safeguards Rule definition.
  • Conduct a written risk assessment. Using the industry standard NIST 800 series best practices, TPx security consultants will review and identify areas of compliance, areas of adjustment, and areas of creation needed per the Safeguards Rule. The report from the best practice review will be provided and utilized to be defensible for the Safeguards Rule. The results of the annual Risk Assessment are further used to inform the formation and ongoing oversight of the security program, policies, and processes. It provides a roadmap for program improvements based on a quantitative evaluation of risk across the environment.
  • Train staff in security awareness. Boost your user security by reinforcing employee best practices with Security Awareness Training and Managed Inbox Detection and Response provided by TPx.
  • Prepare for potential cyber-attacks. All qualifying organizations must perform an annual Penetration Assessment, and a vulnerability scan of their environment twice a year. TPx can perform penetration and vulnerability scans to identify vulnerabilities and provide recommended mitigations. Upon implementing recommended changes, TPx would perform a validation scan to ensure the customer has re-mediated defined risks.

These are just some examples of what TPx can provide your business to help mitigate risks and become defensible. Our offerings are based on the best practices derived from Information Security Standards.

Combined with our extensive experience deploying, architecting, operating, and securing environments nationwide, you’ll find the industry’s best solutions packaged into one fully managed or co-managed service.

The penalties for non-compliance are harsh. You may be fined up to $100,000, so it’s worth going through each requirement, step by step, to make sure you’re covered. We can help you create, maintain, and even own your cybersecurity program for you.

Contact us at to start preparing without the stress and hassle of trying to do it in-house

If you have executive leadership updates or other member news to share with ACA, contact our communications department at [email protected]. View our publications page for more information and our news submission guidelines here.




One moment please...

Share Profile

This site uses cookies. By continuing to use our site, you are agreeing to our use of cookies. Review our Privacy Policy for more information. You may change your preferences on how cookies are stored by reviewing the settings on your browser.

The content on this site is presented for educational, general reference, and informational purposes only; is not intended to serve as legal or other advice; is not intended to be a full and exhaustive explanation of the law in any area; and should not replace the advice of your own legal counsel. By continuing to use our site, you are agreeing to the legal disclaimers in our Terms of Use. Review our Terms of Use for more information.

Friendly Reminder

Get continued access to ACA International’s wide array of resources, which can help you become more profitable, compliant and successful.

Renew your membership today to take advantage of tools you won’t find anywhere else:

  • Discounts on seminars, products, services and events
  • Resources to strengthen your compliance department
  • Industry-specific risk management products and services
  • Participation in ACA’s online community, The Hub
    Members-only website content
  • Professional development and training opportunities, and so much more!

If you have completed your renewal, please disregard this reminder.