Security Beyond Prevention: The Importance of Effective Breach Disclosures
The FTC has long stressed the importance of good incident response and breach disclosure as part of a reasonable information security program, both through cases and business guidance resources. [1] In some instances, the FTC Act creates a de facto breach disclosure requirement because the failure to disclose will, for example, increase the likelihood that affected parties will suffer harm. Both security breach detection and response are vital to...