Cybersecurity Compliance Milestones for Success in 2024
As the dust settles on the much-anticipated December 18, 2023 deadline set by the Securities and Exchange Commission (SEC), Cybersecurity professionals are now faced with five critical deadlines, each demanding attention and strategic preparation.
1. March 31 – PCI DSS 4.0 Compliance:
In the first quarter of 2024, organizations handling card payments must meet the inaugural deadline for Payment Card Industry Data Security Standard version 4.0 (PCI DSS 4.0). This involves fulfilling 13 new requirements, such as defining roles, responsibilities, and the cardholder data environment. A recommended survival guide for PCI DSS 4.0 compliance can be a valuable resource during this complex process.
2. May 13 – FTC Data Breach Reporting Rules:
Starting on May 13, 2024, non-banking financial institutions face new data breach reporting obligations under the amended Safeguards Rule by the Federal Trade Commission (FTC). The rule mandates reporting specific breaches to the FTC within 30 days of discovery, particularly those involving unencrypted information of at least 500 customers.
3. June 15 – SEC Cybersecurity Incident Reporting for Smaller Reporting Companies:
While larger corporations met the December 18, 2023 deadline, smaller reporting companies have until June 15, 2024, to comply with the SEC’s new cybersecurity incident reporting rules. This extension ensures that smaller entities meet the same standards as their larger counterparts when disclosing cybersecurity incidents.
4. July 1 – State Data Privacy Rules in Florida, Oregon, and Texas:
On July 1, 2024, Florida, Oregon, and Texas will enforce new state data privacy rules. The Florida Digital Bill of Rights (FDBR) targets select companies with substantial revenue, the Oregon Consumer Privacy Act (OCPA) focuses on companies handling personal data of Oregon residents, and the Texas Data Privacy and Security Act (TDPSA) has broad applicability but exempts small businesses. Additionally, Montana and Washington have upcoming privacy law deadlines in 2024.
5. Sept. 30 – Federal Agencies’ Zero Trust Architecture Goals:
Following the White House’s January 2022 memorandum, federal agencies must achieve zero trust architecture goals by September 30, 2024. Aligned with the Cybersecurity and Infrastructure Security Agency’s Zero Trust Maturity Model, agencies must complete 19 specific tasks focusing on identity, devices, networks, applications, and data security.
Related Articles
Manage Your Business on the Go with These Must-Have Tools
Business owners are often out and about, shuffling between client meetings, conferences, and business travels. But staying connected to your business while you're away from the office is vital. That's where digital tools come in handy. They make it possible to manage...
Leverage Social Media Insights to Fuel Your Business Growth
Social media is critical to marketing any business. From promoting your products and services and building awareness of what you have to offer to engaging with your customers and building a community of loyal followers, it’s hard to underestimate the importance that...
Google’s Advanced Protection Program Now Offers Passkeys for High-Risk Users
Are you a business owner who uses the Google Advanced Protection Program (APP) for absolute online security? If so, recent updates mean Google’s Advanced Protection Program now offers passkeys for high-risk users like you, making it stronger. Below, we’ll explain the...