Furthermore, the Financial Institution must assign in writing the responsibility for monitoring the management and reporting of information security incidents to one of its officers or ...