OpenControls Logo

STIG Viewer

STIGViewer Support
US Cybersecurity Documents/Reg S-P / S-ID (17 CFR 248)/248.30

248.30(a)(3)(i)

paragraph (action item)

Assess the nature and scope of any incident involving unauthorized access to or use of customer information and identify the customer information systems and types of customer information that may have been accessed or used without authorization;

248.30 Procedures to safeguard customer information, including response programs for unauthorized access to customer information and customer notice; disposal of customer information and consumer information.

Related Frameworks

2 mappings across 4 frameworks
SCF2 mappings
IRO-02Incident Handling
1.00
IRO-02.4Incident Classification & Prioritization
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (94) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-1Policy and Procedures
1.00
AT-1Policy and Procedures
1.00
AT-2Literacy Training and Awareness
1.00
AT-3Role-based Training
1.00
AU-1Policy and Procedures
1.00
AU-5Response to Audit Logging Process Failures
1.00
AU-6Audit Record Review, Analysis, and Reporting
1.00
AU-7Audit Record Reduction and Report Generation
1.00
CA-1Policy and Procedures
1.00
CA-2Control Assessments
1.00

+84 more (top 10 by confidence shown)

NIST 800-1710 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (12) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

3.11.1
1.00
3.12.1
1.00
3.12.2
1.00
3.12.3
1.00
3.12.4
1.00
3.14.6
1.00
3.14.7
1.00
3.3.1
1.00
3.3.2
1.00
3.3.6
1.00

+2 more (top 10 by confidence shown)

CCI0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (100) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

CCI-000437
1.00
CCI-000438
1.00
CCI-000439
1.00
CCI-000440
1.00
CCI-000441
1.00
CCI-000669
1.00
CCI-000670
1.00
CCI-000671
1.00
CCI-000672
1.00
CCI-000673
1.00

+90 more (top 10 by confidence shown)

Securities and Exchange Commission, Regulation S-P (Privacy of Consumer Financial Information and Safeguarding Customer Information) and Regulation S-ID (Identity Theft Red Flags). Edition dated 2026-01-01. Read the publication.