Call us now:
Well worth a read. The Federal Communication Commission (FCC) reached a settlement with T-Mobile, that was published this week, for T-Mobiles failures under the Communications Act 1934. T-Mobile has had its fair share of cyber related incidents involving data breaches of personal information in 2021, 2022 and 2023. Culminating in an FCC order and decent decree published this week.
What does the order and decent decree tell us about T-Mobiles cybersecurity? As it brings to a close investigations against the company for its data breach’s resulting in a civil penalty of $15.75 million and requiring the company to invest $15.75 million in cybersecurity, privacy and data security. An investment identified to improve corporate governance, designating a CISO who will report regularly to the Board of Directors on cybersecurity; Move towards a ‘Zero Trust’ architecture; IAM and MFA; Data minimization and Deletion; Critical Asset Inventory and Third Party Assessments of information security practices.
The decent decree tells us not only will regulators impose fines for non-compliance, they will decide what additional funds should be set aside to manage cybersecurity risk and cybersecurity programs. Programs that regulators will oversea for the protection of consumers and regulatory compliance.
https://lnkd.in/eBs4FB3J
@Thaddeus Dziekanowski Brian D. McCarthy
Veritas GRC Federal Communications Commission T-Mobile
#cybersecurity #cyberriskmanagement #cybergovernance.
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A7247493900859314177