Mortgage Lenders

What arrives

The Safeguards Rule
FTC Safeguards Rule, 16 CFR Part 314. A written program and a Qualified Individual; 16 CFR 314.2 names a mortgage broker as a financial institution.
Source
The 30-day FTC notice
16 CFR 314.4(j). A notification event involving the information of at least 500 consumers is reported to the FTC no later than 30 days after discovery.
Source
The annual penetration test
16 CFR 314.4(d)(2). Continuous monitoring, or else annual penetration testing and periodic vulnerability assessments of information systems.
Source
The board report
16 CFR 314.4(i). The Qualified Individual reports in writing, regularly and at least annually, to the board of directors or equivalent governing body.
Source
Printed forms, a pen and a laptop on a wooden desk, seen from above.

Request an Introduction