Federal Communications Commission (FCC)’s updated data breach rules are in effect as of March 13, 2024. The new rules mandate telecommunications, VoIP and TRS providers to notify the FCC and affected customers within 30 days of a data breach. The definition of “breach” has also been broadened and a harm threshold introduced, which excludes notification if no harm to customers is likely.

Board-Ready Security Metrics That Actually Matter
TL;DR Board-ready security metrics translate technical capabilities into financial risk and business outcomes. Boards need visibility across three dimensions: risk exposure, incident response capability, and

