View Rule

Staff is preparing a Notice of Proposed Rulemaking to amend the system safeguards testing requirements in part 38 for DCMs and part 49 for SDRs. The amendment would require DCMs and SDRs to conduct five major types of system safeguards testing and assessment, as often as indicated by adequate risk analysis and at least at specified minimum intervals, and would require that some types of testing be performed by independent contractors. It would also specify the minimum scope required for such testing, require certification of adequate testing frequency, and clarify system safeguards-related document production requirements in accordance with existing document production regulations.