Circular 1360.10, Corporate Password Standards

(14) Expired passwords can be reset by the user. Disabled or suspended passwords shall be reset by DIT. (15) Evidence of password abuse or compromise must be reported as soon as known to the FDIC Computer Security Incident Response Team (CSIRT), as required by FDIC Circular 1360.12, Reporting Computer Security Incidents. ................
................