I too am confused as to what is finalized. We just had an audit and we recieved a write up for not having any formal procedures in place to ensure identity of a customer requesting credit if a fraud alert appears on the customer's credit report. The recommendation read, "To mitigate fraud risk and ensure the proper identity, formal procedures should be created and implemented. Procedures may include additional steps for identification, additional security questions, as well as additional documentation to evidence of proof." If the Red Flag Guidelines are not finalized yet, how can we still get written up for it? Should the recommended policies be in place already even though there has been no Final Rule released?
_________________________
Stephanie Garza
Compliance Auditor
Inter National Bank