Make sure data is secure in every stage of its life cycle. Use strong encryption to store and transmit sensitive data securely. Learn more about this subject on the FTC’s website: https://www.ftc.gov/tips-advice/business-center/guidance/start-security-guide-business ******************************************** Transcript: Does your company store and transmit sensitive customer data? If so, use strong encryption to keep it secure. The “Start With Security” video series and resources at business.ftc.gov offer valuable tips for keeping your data safe during every stage of its life cycle. For starters, implement security policies for your company’s sensitive data for all stages of transmission and storage. One mortgage company, the subject of an FTC case, started out on the right track. It used SSL encryption when initially transmitting customers’ personal information. But a service provider then emailed that information to the company’s headquarters and branch offices in clear, readable text, making credit card numbers, credit histories, and social security numbers vulnerable. Make sure data is secure at every step. You don’t need to reinvent the wheel. Use security standards that have already been tested and accepted by experts. In another FTC case, an online marketing company used a nonstandard proprietary form of encryption that was open to significant vulnerabilities. Use tried-and-true safeguards that are readily available. Finally, make sure the encryption method you use are properly configured. The FTC brought cases against two companies that turned off a critical certificate validation process. Attackers could have easily intercepted social security or credit card data sent or received by the apps, especially over public Wi-Fi networks. Proper configuration would have made a difference. Use strong encryption to secure confidential material during transmission and storage and make sure your employees understand why proper encryption matters. For more useful tips about keeping your company’s data safe in transit and storage, and building a culture of data security in your business, visit FTC.gov/startwithsecurity. ******************************************** Comment Moderation Policy: We welcome your comments and thoughts about the information on this page. If you do have something to say, please be courteous and respectful to other commenters. We won’t routinely review or edit any comments before they are posted, but we will delete any comments that: 1) contain spam or are off-topic 2) use vulgar language or offensive terms that target specific groups or contain personal attacks 3) are sales pitches, promotions, urls or links to commercial sites 4) spread clearly misleading or false information or 5) include personal information, like home addresses