Business Continuity Planning: Additional Resources

ACH Rules Book
( Requires 6 year file retention on all ACH transactions. An ACH transaction is a batch-processed, value-dated electronic funds transfer between originating and receiving financial institutions.)
Federal legal requirements for critical infrastructure IT security
(Federal laws, regulations, and mandatory standards for securing private sector information technology systems and data in critical infrastructure sectors )
Terrorism: Real Threats. Real Costs. Joint Solutions.
(The Roundtable examines the unique nature of the terrorist threat, as well as the strengths and weaknesses of both government and business in addressing that threat. It then recommends various tools and procedures for government to use when regulating and outline the difficulty of allocating the costs of security.)
USA Patriot Act of 2001: (P.L. 107-56 2001 HR 3162)
(The act includes requirements for records retention for compliance with section 326 on Customer Identification Programs. )
VISA CISP (Cardholder Information Security Program)
(Required compliance standards for major credit card companies for regular security assessments and reporting.)