Source: http://ithandbook.ffiec.gov/it-booklets/management/appendix-b-laws,-regulations,and-guidance-.aspx
Timestamp: 2014-11-28 09:24:41
Document Index: 771531874

Matched Legal Cases: ['art 208', 'arts 211', 'art 225', 'art 364', 'art 364', 'art 721', 'art 748', 'art 716', 'art 741', 'art 740', 'art 30', 'art 30', 'art 570', 'art 570']

FFIEC IT Examination Handbook InfoBase - Appendix B: Laws, Regulations,and Guidance
Welcome » IT Booklets » Management » Appendix B: Laws, Regulations,and Guidance Appendix B: Laws, Regulations,and Guidance	SourcesLawsFederal Reserve BoardFederal Deposit Insurance CorporationNational Credit Union AdministrationOffice of the Comptroller of the CurrencyOffice of Thrift SupervisionExternal Resources LawsResource TitleTypeDate12 USC 1464(d): Home Owner's Loan ActLawsN/A12 USC 1867(c): Bank Service Company ActLawsN/A12 USC 1882: Bank Protection ActLawsN/A15 USC 6801 and 6805(b): Gramm-Leach-Bliley ActLawsN/A18 USC 1030: Fraud and Related Activity in Connection with ComputersLawsN/A Federal Reserve BoardResource TitleTypeDate12 CFR Part 208, Appendix D-2: Interagency Guidelines Establishing Standards for Safeguarding Customer InformationRegulationsN/A12 CFR Parts 211.9 and 211.24 (i): Protection of Customer InformationRegulationsN/A12 CFR Part 225, Appendix F: Interagency Guidelines Establishing Standards for Safeguarding Customer InformationRegulationsN/ASR 01-15: Standards for Safeguarding Customer InformationGuidanceMay 31, 2001SR-Letter 00-17: Guidance on the Risk Management of Outsourced Technology ServicesGuidanceNovember 30, 2000SR 00-4: Outsourcing Information and Transaction ProcessingGuidanceFebruary 29, 2000SR 98-9: Assessment of Information Technology in the Risk-Focused Frameworks for the Supervision of Community Banks and Large Complex Banking OrganizationsGuidanceApril 20, 1998 Federal Deposit Insurance CorporationResource TitleTypeDate12 CFR § Part 364, Appendix A: Interagency Guidelines Establishing Standards for Safety and SoundnessRegulationsN/A12 CFR § Part 364, Appendix B: Interagency Guidelines Establishing Standards for Safeguarding Customer InformationRegulationsN/AFIL-50-2001: Bank Technology Bulletin on OutsourcingGuidanceJune 4, 2001FIL-81-2000: FFIEC Guidance on Managing Risks Associated With Outsourcing Technology ServicesGuidanceNovember 29, 2000FIL-49-99: Required Notification for Compliance with the Bank Service Company ActGuidanceJune 3, 1999FIL-43-2003: Computer Software Patch ManagementGuidanceMay 29, 2003 National Credit Union AdministrationResource TitleTypeDate12 CFR Part 721: Federal Credit Union Incidental Powers ActivitiesRegulationsN/A12 CFR Part 748: Security Program, Report of Crime and Catastrophic Act, Bank Secrecy Act Compliance, and Appendix A - Guidelines for Safeguarding Member InformationRegulationsN/A12 CFR Part 716: Privacy of Consumer Financial InformationRegulationsN/A12 CFR Part 741: Requirements for InsuranceRegulationsN/A12 CFR Part 740: AdvertisingRegulationsN/ANCUA Letter to Credit Unions 02-CU-17: E-Commerce Guide for Credit UnionsGuidanceDecember 2002NCUA Letter to Credit Unions 01-CU-20: Due Diligence Over Third-Party Service ProvidersGuidanceNovember 2001NCUA Letter to Credit Unions 00-CU-11: Risk Management of Outsourced Technology ServicesGuidanceDecember 2000 Office of the Comptroller of the CurrencyResource TitleTypeDate12 CFR Part 30, Appendix A: Interagency Guidelines Establishing Standards for Safety and SoundnessRegulationsN/A12 CFR Part 30, Appendix B: Interagency Guidelines Establishing Standards for Safeguarding Customer InformationRegulationsN/AOCC Bulletin 2001-47: Third-Party RelationshipsGuidanceNovember 1, 2001OCC Advisory Letter 2000-9: Third Party RiskGuidanceAugust 29, 2000OCC Advisory Letter 2000-12: Risk Management of Outsourcing Technology ServicesGuidanceNovember 28, 2000OCC Bulletin 98-3: Technology Risk ManagementGuidanceFebruary 4, 1998 Office of Thrift SupervisionResource TitleTypeDate12 CFR Part 570, Appendix A: Interagency Guidelines Establishing Standards for Safety and SoundnessRegulationsN/A12 CFR Part 570, Appendix B: Interagency Guidelines Establishing Standards for Safeguarding Customer InformationRegulationsN/AThrift Bulletin 82: Third Party ArrangementsGuidanceMarch 19, 2003Regulatory Bulletin 32-21: Technology Risk ControlsGuidanceJanuary 17, 2002Thrift Activities Handbook Section 300: ManagementGuidanceJanuary 2002Thrift Activities Handbook Section 341: Technology Risk ControlsGuidanceJune 2003 External Resources* Non-regulatory Resources and are provided to assist in your research and continuing professional education. They are not endorsed, certified, or approved by the FFIEC or its member agencies.Resource TitleTypeDate
Sound Practices for the Management and Supervision
of Operational Risk
WebsiteFebruary 2003
COBIT®; 3rd Edition; Management
WebsiteJuly 2000
Objectives for Enterprise IT Governance
WebsiteN/A Previous SectionAppendix A: Examination Procedures