OpenControls Logo

STIG Viewer

STIGViewer Support
US Cybersecurity Documents/Reg S-P / S-ID (17 CFR 248)/248.30

248.30(a)(5)(ii)

paragraph (action item)

As part of its incident response program, a covered institution may enter into a written agreement with its service provider to notify affected individuals on the covered institution's behalf in accordance with paragraph (a)(4) of this section.

248.30 Procedures to safeguard customer information, including response programs for unauthorized access to customer information and customer notice; disposal of customer information and consumer information.

Related Frameworks

2 mappings across 4 frameworks
SCF2 mappings
IRO-10Incident Stakeholder Reporting
1.00
TPM-05Third-Party Contract Requirements
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (100) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-1Policy and Procedures
1.00
AC-2(7)Privileged User Accounts
1.00
AC-20Use of External Systems
1.00
AC-20(1)Limits on Authorized Use
1.00
AC-20(3)Non-organizationally Owned Systems — Restricted Use
1.00
AT-1Policy and Procedures
1.00
AU-1Policy and Procedures
1.00
CA-1Policy and Procedures
1.00
CA-3(6)Transfer Authorizations
1.00
CM-1Policy and Procedures
1.00

+90 more (top 10 by confidence shown)

NIST 800-1710 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (4) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

3.11.1
1.00
3.6.1
1.00
3.6.2
1.00
3.1.1
0.50
CCI0 mappings

No source states a mapping between these directly.

Also reachable in 4 hops (100) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

CCI-000227
1.00
CCI-000228
1.00
CCI-000822
1.00
CCI-000823
1.00
CCI-000824
1.00
CCI-000834
1.00
CCI-000835
1.00
CCI-000836
1.00
CCI-000839
1.00
CCI-000844
1.00

+90 more (top 10 by confidence shown)

Securities and Exchange Commission, Regulation S-P (Privacy of Consumer Financial Information and Safeguarding Customer Information) and Regulation S-ID (Identity Theft Red Flags). Edition dated 2026-01-01. Read the publication.