OpenControls Logo

STIG Viewer

STIGViewer Support
US Cybersecurity Documents/Reg S-P / S-ID (17 CFR 248)/248.30

248.30(a)(3)

paragraph (action item)

Response programs for unauthorized access to or use of customer information. Written policies and procedures in paragraph (a)(1) of this section must include a program reasonably designed to detect, respond to, and recover from unauthorized access to or use of customer information, including customer notification procedures. This response program must include procedures for the covered institution to:

248.30 Procedures to safeguard customer information, including response programs for unauthorized access to customer information and customer notice; disposal of customer information and consumer information.

Related Frameworks

3 mappings across 4 frameworks
SCF3 mappings
IRO-01Incident Response Operations
1.00
IRO-02Incident Handling
1.00
IRO-04Incident Response Plan (IRP)
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (100) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-1Policy and Procedures
1.00
AC-2(7)Privileged User Accounts
1.00
AT-1Policy and Procedures
1.00
AT-2Literacy Training and Awareness
1.00
AT-3Role-based Training
1.00
AU-1Policy and Procedures
1.00
AU-5Response to Audit Logging Process Failures
1.00
AU-6Audit Record Review, Analysis, and Reporting
1.00
AU-7Audit Record Reduction and Report Generation
1.00
CA-1Policy and Procedures
1.00

+90 more (top 10 by confidence shown)

NIST 800-1710 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (12) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

3.11.1
1.00
3.12.1
1.00
3.12.2
1.00
3.12.3
1.00
3.12.4
1.00
3.14.6
1.00
3.14.7
1.00
3.3.1
1.00
3.3.2
1.00
3.3.6
1.00

+2 more (top 10 by confidence shown)

CCI0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (100) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

CCI-000669
1.00
CCI-000670
1.00
CCI-000671
1.00
CCI-000672
1.00
CCI-000673
1.00
CCI-000674
1.00
CCI-000805
1.00
CCI-000806
1.00
CCI-000807
1.00
CCI-000808
1.00

+90 more (top 10 by confidence shown)

Securities and Exchange Commission, Regulation S-P (Privacy of Consumer Financial Information and Safeguarding Customer Information) and Regulation S-ID (Identity Theft Red Flags). Edition dated 2026-01-01. Read the publication.