Updated FTC regulations mean financial institutions must implement & maintain an information security program with administrative & physical defenses.
https://www.securitymagazine.com/articles/98938-what-new-regulation-from-the-ftc-means-for-businesses
