12 CFR 609.935
§ 609.935 Business planning.
United States · 12 CFR — Banks and Banking · Status: effective
Cite this
- Citation
- 12 CFR 609.935, § 609.935 Business planning, United States, version 1 as recorded 2026-07-09, yourstate.us, https://yourstate.us/provision/47582
- Permanent ID
ys:prov:47582@1- SHA-256
86d640d8f36bf36173d6b9dc65fa9448dc9daeff7866b67a1deeef45b3293f11
The hash is SHA-256 of this version's text, with every run of whitespace collapsed to a single space and the ends trimmed. The ID always leads back here, and checking it says whether the text you cited is still the current version.
Full text
The annually approved business plan required under subpart J of part 618 of this chapter, and § 652.60 of this chapter for System institutions and the Federal Agricultural Mortgage Corporation, respectively, must include a technology plan that, at a minimum:
(a) Describes the institution's intended technology goals, performance measures, and objectives;
(b) Details the technology budget;
(c) Identifies and assesses the adequacy of the institution's entire cyber risk management program, including proposed technology changes;
(d) Describes how the institution's technology and security support the current and planned business operations; and
(e) Reviews internal and external technology factors likely to affect the institution during the planning period.
Legislative history
This is a federal regulation, adopted through agency rulemaking under the Administrative Procedure Act — not enacted by a recorded vote of Congress.