OpenControls Logo

STIG Viewer

STIGViewer Support
US Cybersecurity Documents/Reg S-P / S-ID (17 CFR 248)/248.30

248.30(a)(5)(i)

paragraph (action item)

A covered institution's response program prepared in accordance with paragraph (a)(3) of this section must include the establishment, maintenance, and enforcement of written policies and procedures reasonably designed to require oversight, including through due diligence and monitoring, of service providers, including to ensure that the covered institution notifies affected individuals as set forth in paragraph (a)(4) of this section. The policies and procedures must be reasonably designed to ensure service providers take appropriate measures to:

248.30 Procedures to safeguard customer information, including response programs for unauthorized access to customer information and customer notice; disposal of customer information and consumer information.

Related Frameworks

1 mapping across 4 frameworks
SCF1 mapping
TPM-01Third-Party Management
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (100) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-1Policy and Procedures
1.00
AC-10Concurrent Session Control
1.00
AC-16Security and Privacy Attributes
1.00
AC-17Remote Access
1.00
AC-18Wireless Access
1.00
AC-19Access Control for Mobile Devices
1.00
AC-2Account Management
1.00
AC-2(7)Privileged User Accounts
1.00
AC-20Use of External Systems
1.00
AC-20(1)Limits on Authorized Use
1.00

+90 more (top 10 by confidence shown)

NIST 800-1710 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (4) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

3.11.1
1.00
3.11.2
1.00
3.11.3
1.00
3.1.1
0.80
CCI0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (100) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

CCI-000669
1.00
CCI-000670
1.00
CCI-000671
1.00
CCI-000672
1.00
CCI-000673
1.00
CCI-000674
1.00
CCI-001054
1.00
CCI-001055
1.00
CCI-001056
1.00
CCI-001057
1.00

+90 more (top 10 by confidence shown)

Securities and Exchange Commission, Regulation S-P (Privacy of Consumer Financial Information and Safeguarding Customer Information) and Regulation S-ID (Identity Theft Red Flags). Edition dated 2026-01-01. Read the publication.