What does the FTC Safeguards Rule require covered financial businesses to maintain?

A written information security program protecting customer information.

Start playing free

  1. A written information security program ✔
  2. A yearly privacy filing with the SEC
  3. A state banking license

Why: Covered financial institutions must keep a written information security program. It uses administrative, technical and physical safeguards suited to the size of the business and its data.

Huh, didn't know that: A business counts as a financial institution if it does activities that are financial in nature, not just banking.

The dad joke
The security program brought three shields: administrative, technical, and physical.
Like this card?
Play the game

References

Answer: A written information security program. Covered financial institutions must keep a written information security program. It uses administrative, technical and physical safeguards suited to the size of the business and its data.

  1. FTC Safeguards Rule www.ftc.gov/business-guidance/resources/ftc-safeguards-rule-what-your-business-needs-know
    develop, implement, and maintain an information security program with administrative, technical, and physical safeguards
    Checked 2026-10-11.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game