This is one you don't have to prove. Just make certain it's in your procedures, and include it in your training.
TISA is a low-risk law. I don't recommend overkill.
_________________________
John S. Burnett
BankersOnline.com
Fighting for Compliance since 1976
Bankers' Threads User #8