In furtherance of the privacy obligation, each agency or authority named in section 505(a) establishes appropriate standards for the financial institutions under its jurisdiction relating to administrative, technical and physical safeguards to insure the security and confidentiality of customer records and information, to protect against any anticipated threats or hazards to their security or integrity, and to protect against unauthorised access to or use of them that could result in substantial harm or inconvenience to any customer. The three objectives are the statutory measure every safeguards rule (16 CFR Part 314, the Interagency Guidelines, Regulation S-P) implements and a financial institution is examined against.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.