DSE security knowledge hub

Business Continuity
Knowledge

Page 6 of the DSE Business Continuity knowledge center, with source-backed guidance and practical next steps.

DSE-authoredOfficial sourcesReviewed guidance
Search the library
Explore this topic

Business Continuity knowledge center

Preparation and recovery guidance that connects technology protection to real service continuity and tested restoration.

Start with the cornerstone guide
DSE post stream

Business Continuity

773 articles
DSE visual briefContinuity & recovery
ExplainerAdvisoryBusiness ContinuityIT

Ask every customer for reviews and never pay for stars: the FTC reviews rule for service businesses

The FTC’s rule on consumer reviews and testimonials, effective October 21, 2024, lets courts impose civil penalties for knowing violations. Incentives are allowed only without a required sentiment, reviews featured in marketing become testimonials, and agencies and review brokers can be liable too.

Published Reviewed 2 min readBy DSE Security Editorial Team
Read the explainer
DSE visual briefContinuity & recovery

Employers that run background checks must dispose of those reports properly under the FTC Disposal Rule

The FTC’s Disposal Rule applies to anyone who uses a consumer report for a business purpose, including employers that run background checks. Paper must be burned, pulverized or shredded, electronic files destroyed or erased so they cannot be reconstructed, and shredding vendors vetted.

Published Reviewed 2 min readBy DSE Security Editorial Team
Read the checklist
DSE visual briefContinuity & recovery

Run the FTC Red Flags Rule two-part creditor test if you check credit before financing customer equipment

The FTC’s Red Flags Rule requires financial institutions and some creditors with covered accounts to keep a written identity theft prevention program. Billing customers later is not enough to qualify, but regularly using consumer reports in credit decisions is, even when a third party pulls the reports.

Published Reviewed 2 min readBy DSE Security Editorial Team
Read the explainer
DSE visual briefContinuity & recovery
BriefingImportantBusiness ContinuityIT

PostgreSQL 14’s final release is November 12, 2026: plan the major upgrade before support ends

PostgreSQL supports each major version for five years. Version 14’s final release is scheduled for November 12, 2026, version 13 is already unsupported, and moving to 15 through 18 needs a dump and reload or pg_upgrade rather than a simple minor update.

Published Reviewed 2 min readBy DSE Security Editorial Team
Read the briefing
DSE visual briefCyber defense

Ohio’s cybersecurity safe harbor: a written program that conforms to a recognized framework earns an affirmative defense

Ohio Revised Code Chapter 1354 gives a business an affirmative defense to Ohio tort claims over a data breach if it maintains a written cybersecurity program that reasonably conforms to a listed framework such as the NIST Cybersecurity Framework, NIST 800-171, CIS Controls or ISO 27000, and updates within a year of revisions.

Published Reviewed 2 min readBy DSE Security Editorial Team
Read the explainer
DSE visual briefContinuity & recovery

Wisconsin breach notice under § 134.98: 45 days, biometric and DNA data, and credit bureaus at 1,000 people

Wisconsin requires notice of unauthorized acquisition of personal information within a reasonable time not exceeding 45 days, counts biometric data and DNA profiles as personal information, and requires nationwide credit bureau notice when 1,000 or more people must be notified.

Published Reviewed 2 min readBy DSE Security Editorial Team
Read the explainer
DSE visual briefContinuity & recovery

Ohio breach notice under R.C. 1349.19: material-risk test, 45-day limit and credit bureau notice above 1,000 residents

Ohio requires notice to residents whose personal information was accessed and acquired when that causes or is reasonably believed to cause a material risk of identity theft or fraud, within 45 days of discovery, with nationwide credit bureau notice when more than 1,000 residents are involved.

Published Reviewed 2 min readBy DSE Security Editorial Team
Read the explainer
DSE visual briefContinuity & recovery

Illinois breach notice under PIPA: covered data, notice content and the 500-resident Attorney General rule

Illinois’ Personal Information Protection Act requires data collectors to notify affected Illinois residents in the most expedient time possible, covers medical, health insurance and biometric data as well as financial identifiers, and adds Attorney General notice when more than 500 residents are affected.

Published Reviewed 2 min readBy DSE Security Editorial Team
Read the explainer
DSE visual briefManaged IT operations
PlaybookAdvisoryBusiness ContinuityIT

Make service-vehicle safety a written program, including how dispatch apps distract technicians

OSHA says transportation incidents average 39% of occupational fatalities and asks employers to run written vehicle-safety policies. It specifically warns that dispatching and rerouting systems can cause distracted driving, which matters for every field-service team that sends jobs to phones.

Published Reviewed 2 min readBy DSE Security Editorial Team
Read the playbook
DSE visual briefNetworks & infrastructure

Treat utility vaults, manholes and pits as permit-required confined spaces until the employer has evaluated them

OSHA lists underground vaults, manholes and pits as confined spaces. Before cabling or fiber crews enter one, the employer must have identified whether it is permit-required, and entrants need training, a permit, atmospheric testing and continuous contact with an attendant.

Published Reviewed 2 min readBy DSE Security Editorial Team
Read the checklist