FTC’s Proposed Amendments Show a Growing Demand for Third-Party Cyber Risk Management

The FTC is updating the requirements for organizations to establish a reasonable cybersecurity program, with revised recommendations involving internal actions of a company, such as designating a CISO who will report on cybersecurity, at least annually, to the board of directors.