Notification of Reportable Cyber Incident

Pursuant to 12 C.F.R. Part 748 credit unions are required to notify the appropriate federal regulator no later than 72 hours after the credit union determines that a cyber incident, which rises to the level of a reportable cyber incident, has occurred. A reportable cyber incident is an occurrence identified in 12 CFR § 748.1 . If a cyber incident is required to be reported under federal law, then a duplicate of such report, whether provided via email, telephone, or otherwise, will be submitted simultaneously to the Department. Authority: O.C.G.A. §§ 7-1-61 , 7-1-663 . History. Original Rule entitled "Standard Form Bylaws" adopted. F. Oct. 20, 1981; eff. Nov. 9, 1981. Repealed: F. Oct. 12, 1989; eff. Nov. 1, 1989. Adopted: New Rule entitled "Notification of Reportable Cyber Incident." F. July 7, 2023; eff. July 27, 2023. Amended: F. July 12, 2024; eff. Aug. 1, 2024.