|
Feds to banks: Put security policies in writing |
|
|
|
Source: ZDNet.com - Posted by Benjamin D. Thomas
|
Even if federal law doesn't explicitly say so, all companies that handle personal information for their customers should have written security policies, a computer security attorney said Tuesday.
Last month, the Federal Reserve Board, which governs the U.S. banking industry, issued a new guide stating that all banks and other financial institutions must take certain steps to safeguard the personal data they handle.
Among other things, those entities are expected to tightly control who can access their customer information systems. The are also called on to monitor physical storage of paper records, set up monitoring systems to detect intruders and provide written contracts outlining how they will respond to suspected breaches.
Read this full article at ZDNet.com
Powered by AkoComment! |
