12 CFR §155.210
To use electronic means and facilities under this subpart, a Federal savings association's management must:
- (a)Identify, assess, and mitigate potential risks and establish prudent internal controls; and
- (b)Implement security measures designed to ensure secure operations. Such measures must be adequate to:
- (1)Prevent unauthorized access to the savings association's records and its customers' records;
- (2)Prevent financial fraud through the use of electronic means or facilities; and
- (3)Comply with applicable security devices requirements of part 168 of this chapter.