OMB control number

Computer-Security Incident Notification

OMB 1557-0350 · TREAS/OCC.

OMB 1557-0350

The reporting requirement requires a banking organization to notify its primary federal bank regulatory agency of the occurrence of a “notification incident” at the banking organization. The disclosure requirement requires a bank service provider to notify at least two individuals at affected banking organization customers immediately after it experiences a computer-security incident that it believes in good faith could disrupt, degrade, or impair services provided subject to the Bank Service Company Act for four or more hours.

The latest form for Computer-Security Incident Notification expires 2028-05-31 and can be found here.

OMB Details

Reporting

Federal Enterprise Architecture: Economic Development - Financial Sector Oversight