Protecting Customer Data: Building Your Written Security Plan

About this course

Every business that takes payments, keeps customer records, or stores employee files holds information worth protecting, and some, including tax preparers and other financial businesses, are required by federal rules to have a written plan. This on-demand session walks through mapping the data you hold, building a written information security plan, working safely with vendors and payment processors, and training staff so the plan actually holds.

Open to any business. Accountants and tax preparers will find it especially relevant; CPE credit is not offered at this time.

CLE accreditation in progressTediso courses do not currently carry CLE or CPE credit.

Learning objectives

By the end of this session, you will be able to:

• Map the customer, payment, and employee information your business collects and where it lives.
• Assemble the core sections of a written information security plan.
• Set basic security expectations for vendors, software providers, and payment processors.
• Explain when federal rules, such as the FTC Safeguards Rule for tax and financial businesses, require a written plan.

Agenda

1. 0–10 min

   What data you hold, and why it's a target

   Customer records, card payments, and employee files.

2. 10–25 min

   Building your written plan

   Risk assessment, safeguards, a designated owner, and annual review.

3. 25–40 min

   Vendors, payments, and staff

   Day-to-day practices that keep the plan working.

4. 40–50 min

   When the rules require it

   Who must have a written plan, and how to keep it current.

Instructors

Format and materials