How FDIC Expects Banks to Address Identity Theft

FDIC has issued its "Supervisory Policy on Identity Theft" in FIL-32-2007 (April 11, 2007).  This advice to banks summarizes examination expectations and collects the following references to current regulatory pronouncements regarding identity theft.

• FFIEC Information Security Handbook, issued July 2006
• FIL-18-2006, Fair Credit Reporting Act - Revised Examination Procedures (See module 5), February 22, 2006
• FIL-103-2005, Authentication in an Internet Banking Environment, October 12, 2005
• FIL-66-2005, Guidance on Mitigating Risks From Spyware, issued July 22, 2005
• FIL-64-2005, Guidance on How Financial Institutions Can Protect Against Pharming Attacks issued July 18, 2005
• Guidance on Response Programs for Unauthorized Access to Customer Information and Customer Notice, April 1, 2005
• FIL-27-2004, Guidance on Safeguarding Customers Against E-Mail and Internet Related Fraud, issued March 12, 2004
• Interagency Informational Brochure on Phishing Scams, contained in FIL-113-2004, issued September 13, 2004

Attachment:
Supervisory Policy on Identity Theft

Link:  http://www.fdic.gov/news/news/financial/2007/fil07032.html

(ag) April 16, 2007, in Identity Theft