Reporting Information Security Incidents

• Legal Form Number: FDIC Directive 1360.12
• Section: Federal Deposit Insurance Corporation

FDIC DIRECTIVE

1360.12

Howard G. Whyte

Chief Information Security Off icer

Chief Information Officer Organization /

Informatio n Security and Privacy Staff

See signature(s) on Action Log

Reporting Information Security Incidents

PURPOSE

To issue policy and communicate reporting requirements for information security incidents for

unclassified information.

SCOPE

The provisions outlined in this Directive apply to all users of FDIC infor mation systems and to all

users or possessors of unclassified FDIC information or data regardless of form or for mat.

AUTHORITIES

 FDIC 1360.9, Protecting Sensitive Information

 FDIC 12000.1, Cooperation with the Office of Inspector General

 Federal Information Security Modernization Act of 2014 (FISMA) (Pub. L. No. 113-283,

as codified at 44 U.S.C. § 3554(b)

 Office of Management and Budget (OMB) Memorandum 17-05, Fiscal Year 2016-2017

Guidance on Federal Information Security and Privacy Management Requirements,

November 4, 2016

FORM(S)

None

REVISION(S)

FDIC 1360.12, Reporting Computer Security Incidents, dated June 26, 2003, is hereby revised

and superseded.