Security Procedure

Businesses must maintain records of consumer requests and the businesses response for at least 24 months. The records must include the date of request, nature of request, manner in which it was made, date and nature of response, basis for any denial.

It is unlawful for a covered operator to collect personal information from a child in a manner that violates the Rule. Generally an operator must: provide notice of what it collects, how it uses it, and its disclosure practices;

Undertakings establish a written, AMSB-approved information security policy defining principles and rules to protect confidentiality, integrity and availability of information, with roles and responsibilities, communicated to all staff (and relevant service pr...

Internal Revenue Service (IRS) Publication 1075 Tax Information Security Guidelines for Federal + State and Local Agencies + Safeguards for Protecting Federal Tax Returns and Return Information. Most recent revision: Rev. November 2021 (preceded by Rev.

Protect supply chain information including shipping documentation, routing plans, customer data, and security procedures from unauthorized access and disclosure.

Identify vulnerabilities and predisposing conditions per NIST SP 800-30 Rev 1 Section 3.2 Step 3 + Appendix F (Vulnerabilities and Predisposing Conditions).