Authentic statutory obligations decomposed into atomic machine-actionable conditions, actions, and verification standards.
Covered financial institutions shall implement multi-factor authentication for any individual accessing customer information. Encrypt all customer information at rest and in transit across external networks. Develop, implement, and maintain a written incident response plan designed to promptly respond to, and recover from, any security event materially affecting customer information.
