Which Board of Directors can be informed that a SAR has been filed ... only the Board of the filing entity or also its holding company or parent board? And ... if affiliates share a security officer, are you okay with the fact that, by definition, once the security officer knows of a SAR by one entity, that entity's affiliates know of the SAR filing. Thanks for your thoughts.

I believe you should keep the notification "in house." Sharing it with an affiliate's board may violate the rules, and it definitely provides more chances for the information to leak outside the "family."

As for the busy security officer, he or she should limit any discussion about the SAR to those persons within the reporting institution who need to participate in or know about the SAR. In other words, the security officer needs to know which information can be shared with which groups of people.

This information should not be exchanged except for sharing institutions under §314(b) of USAPA.