The FTC has reached settlements with The TJX Companies Inc. and Reed Elsevier after alleging the firms did not provide sufficient security for consumer information. Under the settlements, the companies must implement new security programs and undergo security audits by third-party professionals every other year for 20 years.