"Over the course of nearly 60 enforcement actions, the Federal Trade Commission has put forth a 'reasonable and appropriate' security standard for the protection of personal information. With this book, we seek to leverage our experience responding to some of the earliest data security related inquiries and engaging with the Commission at every step along the way since then to provide you with a tool for understanding the standard's elements and identifying the security practices that most approximate the Commission's 'reasonable and appropriate' security standard." – Stu Ingis and Milo Cividanes