Title of Report [omit “Audit of”]

September 2007 Report No. AUD-07-013 Response to Privacy Program Information Request in OMB’s Fiscal Year 2007 Reporting Instructions for FISMA and Agency Privacy Management AUDIT REPORT Report No. AUD-07-013 September 2007 Response to Privacy Program Information Request in OMB’s Fiscal Year 2007 Reporting Instructions for FISMA and Agency Privacy Management Background and Purpose of Audit Results of Audit In fulfilling its legislative mandate of insuring deposits, supervising financial institutions, and The FDIC continues to take action to safeguard its PII and managing receiverships and in its role as a federal related systems and address privacy-related provisions of employer and acquirer of services, the FDIC recent OMB memoranda. Of particular note, the FDIC has creates and acquires a significant amount of personally identifiable information (PII) appointed a senior agency official for privacy, conducted (e.g., name, Social Security number, or biometric privacy reviews prescribed by OMB, and provided records) related to depositors and borrowers at employees and contractors with privacy-awareness training. FDIC-insured financial institutions and FDIC Importantly, the FDIC has established a process for employees and contractors. Much of the PII conducting PIAs of its information systems containing PII managed by the FDIC and its contractors falls that is consistent with relevant privacy-related policy, within the scope of ...