Is there a FFIEC standard that requires a bank to be able to track activity within the various software applications? Not for data security as I have found those standards. For instance, for each inquiry or deposit/withdrawal transaction an employee keys into an application are banks required to track this and if so what are the retention requirements.