OpenControls Logo

STIG Viewer

STIGViewer Support
US Cybersecurity Documents/Reg S-P / S-ID (17 CFR 248)/248.30

248.30(b)(2)

paragraph (action item)

Written policies, procedures, and records. Every covered institution, other than notice-registered broker-dealers, must adopt and implement written policies and procedures that address the proper disposal of consumer information and customer information according to the standard identified in paragraph (b)(1) of this section.

248.30 Procedures to safeguard customer information, including response programs for unauthorized access to customer information and customer notice; disposal of customer information and consumer information.

Related Frameworks

1 mapping across 3 frameworks
SCF1 mapping
DCH-21Information Disposal
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (6) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-4(25)Data Sanitization
1.00
MP-6Media Sanitization
0.50
MP-6(3)Nondestructive Techniques
0.50
SI-12Information Management and Retention
0.50
SI-12(3)Information Disposal
0.50
SR-12Component Disposal
0.50
CCI0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (1) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

CCI-005008
0.50

Securities and Exchange Commission, Regulation S-P (Privacy of Consumer Financial Information and Safeguarding Customer Information) and Regulation S-ID (Identity Theft Red Flags). Edition dated 2026-01-01. Read the publication.