The depository inspection order identifies control deficiencies in pledge communications, endpoint protection and disaster-recovery logging, while rejecting one basic-account allegation.
The consultation would permit defined related activities without a separate approval each time, subject to capital, governance and reporting conditions. Clearing corporations are excluded.