I believe you should keep the notification "in house." Sharing it with an affiliate's board may violate the rules, and it definitely provides more chances for the information to leak outside the "family."
As for the busy security officer, he or she should limit any discussion about the SAR to those persons within the reporting institution who need to participate in or know about the SAR. In other words, the security officer needs to know which information can be shared with which groups of people.
This information should not be exchanged except for sharing institutions under §314(b) of USAPA.
John S. Burnett
Fighting for Compliance since 1976
Bankers' Threads User #8