STIGViewer Support

248.30(a)(5)(iii)

paragraph (action item)

Notwithstanding a covered institution's use of a service provider in accordance with paragraphs (a)(5)(i) and (ii) of this section, the obligation to ensure that affected individuals are notified in accordance with paragraph (a)(4) of this section rests with the covered institution.

248.30 Procedures to safeguard customer information, including response programs for unauthorized access to customer information and customer notice; disposal of customer information and consumer information.

Related Frameworks

1 mapping across 4 frameworks
SCF1 mapping
IRO-10Incident Stakeholder Reporting
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (34) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

CP-1Policy and Procedures
1.00
IR-1Policy and Procedures
1.00
IR-3(2)Coordination with Related Plans
1.00
IR-4Incident Handling
1.00
IR-4(11)Integrated Incident Response Team
1.00
IR-4(15)Public Relations and Reputation Repair
1.00
IR-4(8)Correlation with External Organizations
1.00
IR-5Incident Monitoring
1.00
IR-6Incident Reporting
1.00
IR-7Incident Response Assistance
1.00

+24 more (top 10 by confidence shown)

NIST 800-1710 mappings

No source states a mapping between these directly.

Also reachable in 4 hops (3) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

3.11.1
1.00
3.6.1
1.00
3.6.2
1.00
CCI0 mappings

No source states a mapping between these directly.

Also reachable in 4 hops (76) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

+66 more (top 10 by confidence shown)

Securities and Exchange Commission, Regulation S-P (Privacy of Consumer Financial Information and Safeguarding Customer Information) and Regulation S-ID (Identity Theft Red Flags). Edition dated 2026-01-01. Read the publication.