Federally chartered lenders must implement a program responding to any security breach that may result in the theft or endangerment of customer information, according to federal thrift and banking agencies. Under final guidance issued jointly by the Federal Reserve Board, the Office of the Comptroller of the Currency, the Federal Deposit Insurance Corp., and the Office of Thrift Supervision, financial institutions must design and implement a risk-based response program based on their size, complexity,