Title of Report [omit “Audit of”]

September 2008 Report No. AUD-08-015 Protection of Resolution and Receivership Data Managed or Maintained by an FDIC Contractor Report No. AUD-08-015 September 2008 Protection of Resolution and Receivership Data Managed or Maintained by an FDIC Federal Deposit Insurance Corporation Contractor Why We Did The Audit Audit Results The FDIC’s Division of Resolutions and Receiverships (DRR) is responsible for DRR’s closing support BOA contains the necessary privacy and information security all activities related to the closing, field clauses consistent with FDIC guidance that was in place when the FDIC awarded the management, and resolution of failed KEY FDIC PRIVACY AND contract. Moreover, the Statement of Work contains a clause requiring that the financial institutions. The objectives of SECURITY CLAUSES contractor comply with all FDIC policies and procedures, including any new policies this audit were to (1) determine whether and procedures developed during the contract term. For instance, the contractor the closing support contract used by the would be required to comply with the FDIC’s policy for safeguarding information DRR Business Information Systems described in FDIC Circular 1360.9, Protecting Sensitive Information, which became (BIS) Section contains privacy and effective after the contract award date. information ...