PATRIOT Act IT Security guidelines

["RD D" <rdd37it () hotmail com>]

Hello All --

I have been researching the PATRIOT Act as it relates to data protection.  
Essentially, the Act requires financial institutions to gather information 
regarding terrorists and suspected terrorists, and monitor accounts which 
they maintain for any links to the suspects.

I am interested in finding any guidelines on how this sensitive information 
must be protected, potential penalties for negligence, and any reporting 
requirements for intrusions or other incidences.

I have not been able to find very detailed information beyond what was 
originally stated in the Act, which specifies that the Secretary of the 
Treasury shall, in the future, enact regulations to:
"further establish procedures for the protection of the shared information, 
consistent with the capacity, size, and nature of the institution to which 
the particular procedures apply."

I believe the deadline for these additional regulations to be enacted has 
passed, but have not been able to locate anything.

Thank you very much for any assistance.

Bob






_________________________________________________________________
Tired of spam? Get advanced junk mail protection with MSN 8. 
http://join.msn.com/?page=features/junkmail