1. The safeguards each institution must develop and implement are to protect:

confidential bank examination reports.
the security, confidentiality, and integrity of customer information.
the bank's computer equipment.

2. Each bank is required to identify ________________ internal and external threats that could result in unauthorized disclosure, misuse, alteration, or destruction of customer information or customer information systems.

reasonably foreseeable
currently known and existing
all

3.Once the threats have been identified, the insitution must assess the ___________ these threats, taking into consideration the sensitivity of customer information.

cost of responding to
possibility of obtaining customer waiver of liability from
likelihood and potential damage of

4. In designing your information security program to control the identified risks, you should design it to be commensurate with the _____________________ as well as the complexity and scope of the bank's activities.

sensitivity of the information
asset size of the institution
sophistication of your tech staff

5. The guidelines require each institution to consider whether ____ security measures specifically described in the guidelines are appropriate for the institution and, if so, adopt these measures the institution concludes are appropriate.

eight
fifteen
ten