Establishing a Reasonable Security Program

Elizabeth Rogers, partner, sub-group leader, privacy & cybersecurity, Michael Best, and Peggy Smedley talk about the legal standards for establishing a reasonable security program. She says one of the longest serving standards in the United States is the FTC act, section 5, that requires for providing a security program that is not deceptive and not unfair. Passed originally in 1914, the lawmakers weren’t thinking about cybersecurity, so today’s lawmakers had to establish a reasonable security program. They also discuss: · What regulators will be focusing on and how to create a reasonable security program. · The different new ways of working and how security comes into play. · Cases that can serve as a good learning opportunity.