The FACTA Red Flag Rule

Understanding the Rules and Recommendations for Compliance

---

Recent updates to the Fair and Accurate Credit Transactions Act (FACTA) of 2003 mandate that U.S. financial institutions and creditors implement an Identity Theft Prevention Program to detect, prevent, and mitigate identity theft for covered accounts. The final Identity Theft "Red Flag" rules and guidelines went into effect on January 1, 2008 and have a mandatory compliance date of November 1, 2008.

Classify your Data, Control your Data, and Protect your Data!

To mitigate the risk of identity theft for your customers, TITUS offers information classification tools that provide financial institutions and creditors an information-centric approach to protect information throughout its lifecycle—no matter where it moves, who accesses it or how it is used.

Information Classification allows organizations to control the distribution of their corporate and customer confidential information (security, integrity, availability) inside and outside of their organization. By controlling your sensitive data, you not only protect your reputation and brand but you also mitigate compliance risk

Classifying email and documents facilitates compliance with regulations such as Identity Theft Red Flag Rule, Sarbanes-Oxley, SEC rule 17a-4, Rule 204-2, NASD rule 2210, 3110 and NYSE Rule 440.s

Filling Security Gaps with TITUS Information Classification Solutions!

TITUS information classification solutions offer a unified approach to security, compliance and enforcement policies. Our solutions help organizations protect their sensitive information by preventing data breaches or unauthorized access to personal information and potential data mismanagement while meeting compliance regulations.

Keep your organization secure, compliant and competitive!

By utilizing classification solutions from TITUS, financial organizations ensure their employees:

• Understand the sensitivity of information and prevent misuse of information
• Classify and apply markings that clearly identify the existence of confidential information
• Control the flow of information based on pre-defined labels to restrict the viewing, printing, copying or distribution of email and documents
• Prevent intentional or inadvertent information leakage
• Comply with auditable archival regulations

Red Flag Rule Solutions Include:

• Message Classification: Classifies, labels, and protectively marks email in Microsoft Outlook, Outlook Web Access, and mobile devices.
• Classification for Microsoft Office: Classifies, labels, and protectively marks documents in Microsoft Office Word, Excel, and PowerPoint.