If the FTC reviewed your organization today, could you prove that your cybersecurity practices match your written policies and protect customer data?
In this episode, host Tony Pietrocola, President and Co-founder of AgileBlue, and co-host Joe Marquette, AgileBlue CEO and Co-founder, speak with James S. Ganther, Owner and CEO of Mosaic Compliance Services, about how you decide on cybersecurity spending today can cost you tomorrow. They explain why written policies and purchased technology aren’t enough without testing and verification. The conversation covers phishing, employee training, risk assessments, qualified individuals, and network vulnerability assessments. James also explains how organizations can document that their cybersecurity controls work as intended.
Key takeaways:
- What the FTC Safeguards Rule requires car dealerships to document, monitor, test, and verify in practice
- Why a written information security program must reflect the dealership’s real cybersecurity controls and risks
- How phishing and stolen credentials can expose customer records, dealership systems, and daily operations
- What network vulnerability assessments can uncover about missing controls and customer data exposure
- How qualified individuals, employee training, technology partners, and regular audits support compliance