OMB control number

Computer-Security Incident Notification

OMB 1557-0350 · TREAS/OCC.

OMB 1557-0350

The reporting requirement requires a banking organization to notify its primary federal bank regulatory agency of the occurrence of a “notification incident” at the banking organization. The disclosure requirement requires a bank service provider to notify at least two individuals at affected banking organization customers immediately after it experiences a computer-security incident that it believes in good faith could disrupt, degrade, or impair services provided subject to the Bank Service Company Act for four or more hours.

The latest form for Computer-Security Incident Notification expires 2028-05-31 and is listed under ICR 202501-1557-001.

All Historical Document Collections

Historical document collections
ReferenceFilingReceivedConcludedAction
202501-1557-001 Extension without change of a currently approved collection 2025-01-31
202110-1557-001 New collection (Request for a new OMB Control Number) 2021-11-23 Approved without change
202103-1557-008 New collection (Request for a new OMB Control Number) 2021-03-29 Comment filed on proposed rule

OMB Details

Reporting

Federal Enterprise Architecture: Economic Development - Financial Sector Oversight