(a) Except as modified in this subpart, or unless the
context otherwise requires, the terms used in this subpart have the
same meanings as set forth in 12 U.S.C. 1813.
(b) For purposes
of this subpart, the following definitions apply.
(1) Banking organization means a
U.S. bank holding company; U.S. savings and loan holding company;
state member bank; the U.S. operations of foreign banking organizations;
and an Edge or agreement corporation; provided, however, that no designated
financial market utility shall be considered a banking organization.
(2) Bank service
provider means a bank service company or other person that performs
covered services; provided, however, that no designated financial
market utility shall be considered a bank service provider.
(3) Business line means a product
or service offered by a banking organization to serve its customers
or support other business needs.
(4) Computer-security incident is an occurrence that results
in actual harm to the confidentiality, integrity, or availability
of an information system or the information that the system processes,
stores, or transmits.
(5) Covered
services are services performed, by a person, that are subject
to the Bank Service Company Act (12 U.S.C. 1861-1867).
(6) Designated financial market utility has the same meaning as set forth at 12 U.S.C. 5462(4).
(7) Notification incident is a computer-security
incident that has materially disrupted or degraded, or is reasonably
likely to materially disrupt or degrade, a banking organization’s—
(i) Ability to carry
out banking operations, activities, or processes, or deliver banking
products and services to a material portion of its customer base,
in the ordinary course of business;
(ii) Business line(s), including associated operations, services,
functions, and support, that upon failure would result in a material
loss of revenue, profit, or franchise value; or
(iii) Operations, including associated
services, functions and support, as applicable, the failure or discontinuance
of which would pose a threat to the financial stability of the United
States.
(8) Person has the same meaning as set forth at 12 U.S.C. 1817(j)(8)(A).
