Cybersecurity Compliance Milestones for Success in 2024
As the dust settles on the much-anticipated December 18, 2023 deadline set by the Securities and Exchange Commission (SEC), Cybersecurity professionals are now faced with five critical deadlines, each demanding attention and strategic preparation.
1. March 31 – PCI DSS 4.0 Compliance:
In the first quarter of 2024, organizations handling card payments must meet the inaugural deadline for Payment Card Industry Data Security Standard version 4.0 (PCI DSS 4.0). This involves fulfilling 13 new requirements, such as defining roles, responsibilities, and the cardholder data environment. A recommended survival guide for PCI DSS 4.0 compliance can be a valuable resource during this complex process.
2. May 13 – FTC Data Breach Reporting Rules:
Starting on May 13, 2024, non-banking financial institutions face new data breach reporting obligations under the amended Safeguards Rule by the Federal Trade Commission (FTC). The rule mandates reporting specific breaches to the FTC within 30 days of discovery, particularly those involving unencrypted information of at least 500 customers.
3. June 15 – SEC Cybersecurity Incident Reporting for Smaller Reporting Companies:
While larger corporations met the December 18, 2023 deadline, smaller reporting companies have until June 15, 2024, to comply with the SEC’s new cybersecurity incident reporting rules. This extension ensures that smaller entities meet the same standards as their larger counterparts when disclosing cybersecurity incidents.
4. July 1 – State Data Privacy Rules in Florida, Oregon, and Texas:
On July 1, 2024, Florida, Oregon, and Texas will enforce new state data privacy rules. The Florida Digital Bill of Rights (FDBR) targets select companies with substantial revenue, the Oregon Consumer Privacy Act (OCPA) focuses on companies handling personal data of Oregon residents, and the Texas Data Privacy and Security Act (TDPSA) has broad applicability but exempts small businesses. Additionally, Montana and Washington have upcoming privacy law deadlines in 2024.
5. Sept. 30 – Federal Agencies’ Zero Trust Architecture Goals:
Following the White House’s January 2022 memorandum, federal agencies must achieve zero trust architecture goals by September 30, 2024. Aligned with the Cybersecurity and Infrastructure Security Agency’s Zero Trust Maturity Model, agencies must complete 19 specific tasks focusing on identity, devices, networks, applications, and data security.
Related Articles
Hackers Compromise ISPs with Malware to Steal Customer Credentials
A critical zero-day vulnerability exploited since June that affected ISPs has now been patched. Malicious hackers, likely operating on behalf of the Chinese government, have been leveraging a high-severity zero-day vulnerability to infect at least four U.S.-based ISPs...
Microsoft Ends Support for Windows 10: How to Prepare for the Transition to Windows 11
As technology rapidly evolves, so do the operating systems that power our devices. Microsoft has announced that it will officially end support for Windows 10 on October 14, 2025. This decision marks a significant milestone for the millions of users who rely on Windows...
Cyberattack Disrupts Microchip Technology’s Manufacturing Operations
US semiconductor leader Microchip Technology (NASDAQ: MCHP) has reported a cyberattack that has significantly impacted operations at several of its manufacturing facilities. On August 17, the company detected unusual activity within its IT systems, and by August 19,...