IT Examiner School, Seaside, CA

Pandemic Planning

• Two significant repercussions of a pandemic are:

– Greatly reduces the number of available personnel to perform tasks, and the potential that the personnel may not be sufficiently trained to maintain operations.

– Limitation of direct access to facilities due to quarantine or minimization of contact to prevent spread of illness.

• Guidance for bankers can be found in FIL-6-2008 Interagency Statement on Pandemic Planning Guidance for Minimizing a Pandemic’s Potential Adverse Effects .

Incident Response Plan - Procedures

At a minimum an incident response program should contain procedures for the following:

• Assess the nature and scope of an incident, identify what customer information systems and types of customer information have been accessed or misused.

• Notify primary Federal regulator.

• File Suspicious Activity Report ("SAR") as required.

• Take appropriate steps to contain and control the incident to prevent further unauthorized access.

• Notify customers when warranted.