FTC SAFEGUARDS RULE

FTC Safeguards Rule Compliance for Lafayette and Baton Rouge Businesses

FTC Safeguards Rule compliance for Louisiana CPA firms, tax preparers, dealers and lenders: written security program, MFA, testing and annual report.

Get Your Free Cyber & AI Risk Score →Talk to Our Team

Who in Lafayette helps businesses comply with the FTC Safeguards Rule? Vital Integrators, an Acadiana-based IT and cybersecurity firm, helps CPA firms, tax preparers, mortgage brokers, auto dealers, insurance agencies and other non-bank financial businesses in Lafayette and Baton Rouge build and document the information security program the rule requires.

We are the only IT firm in Louisiana that holds the CompTIA Security Trustmark+, a third-party assessed validation of our own security practices.

Get your free Cyber Risk Score or call (337) 313-4200.

Who the FTC Safeguards Rule covers

The Safeguards Rule comes from the Gramm-Leach-Bliley Act and applies to businesses the FTC treats as financial institutions. That group is broader than most owners expect. It includes tax preparers and many accounting firms, mortgage brokers and lenders, auto dealers that arrange financing, payday and consumer lenders, collection agencies, investment advisers not regulated by the SEC, and others. If you collect customer financial information while providing a financial product or service, assume the rule applies until a qualified advisor tells you otherwise.

What the rule requires

The Safeguards Rule requires a written information security program with specific elements:

  1. A qualified individual responsible for the program. This can be an outside provider, as long as the business keeps oversight.
  2. A written risk assessment of risks to customer information.
  3. Safeguards based on that assessment, including access controls, an inventory of data and systems, encryption of customer information at rest and in transit, secure development practices for any in-house software, multi-factor authentication for anyone accessing customer information, secure data disposal, change management, and monitoring and logging of user activity.
  4. Regular testing of your safeguards through ongoing monitoring or periodic penetration testing and vulnerability scanning.
  5. Staff training in security awareness.
  6. Oversight of service providers that handle customer information.
  7. A written incident response plan.
  8. An annual written report from the qualified individual to the board or owner.

How Vital gets you compliant

Risk assessment and gap report

We assess how customer information is collected, stored, accessed and shared across your systems, including tax software, client portals, email, file shares and AI tools, and compare it to each element of the rule.

Written information security program

We draft the program document, incident response plan and policies in plain language, tailored to your firm rather than a template with your name pasted in.

Technical safeguards

Multi-factor authentication, encryption, endpoint detection and response, email protection, logging and 24/7/365 security monitoring. We also offer penetration testing and vulnerability scanning.

Qualified individual support

Vital can serve as your outside qualified individual or support an internal one, and we prepare the annual report to your owners or board.

Training and records

Security awareness training with completion records, and one organized compliance file for everything an examiner or insurer might ask for.

AI and customer financial data

Pasting client tax returns or financial statements into a public AI tool can expose customer information under the rule. We add AI to your program with shadow AI detection, an AI acceptable-use policy and data classification. See AI compliance and governance.

Industry pages

Local help

Vital Integrators is based in Acadiana, under current ownership since 2013, and serves Lafayette and Baton Rouge in person. We provide technical and documentation support, not legal advice; confirm coverage questions with your attorney or professional association.

Start here

The free Cyber and AI Risk Score takes about 5 minutes and returns a Cyber Risk Score, an AI Readiness grade, an estimated dollar exposure and a 30/60/90-day roadmap, reviewed by a senior team member within one business day.

Get your free Cyber and AI Risk Score or call (337) 313-4200.

Frequently Asked Questions

Who helps with FTC Safeguards Rule compliance in Lafayette?

Vital Integrators, an Acadiana-based cybersecurity firm, builds and documents Safeguards Rule programs for CPA firms, tax preparers, dealers, lenders and other non-bank financial businesses in Lafayette and Baton Rouge.

Does the Safeguards Rule apply to CPA firms?

It applies to tax preparers and many accounting firms, because the FTC treats them as financial institutions. Confirm coverage with your attorney or professional association.

Can Vital be our qualified individual?

Yes. Vital can serve as your outside qualified individual or support an internal one, while your firm keeps oversight.

Is multi-factor authentication required?

Yes. The rule requires multi-factor authentication for anyone accessing customer information, with limited exceptions.

Do we need penetration testing?

The rule requires regular testing of your safeguards, through ongoing monitoring or periodic penetration testing and vulnerability scanning. We provide both.