---
kind: "section"
citation: "12 C.F.R. § 304.22"
title: "12"
number: "304.22"
heading: "Definitions."
url: "https://uscodex.org/cfr/12/304.22"
---

# §304.22. Definitions.

- (a) Except as modified in this subpart, or unless the context otherwise requires, the terms used in this subpart have the same meanings as set forth in [12 U.S.C. 1813](/usc/12/1813.md).
- (b) **For purposes of this subpart, the following definitions apply.**
  - (1) Banking organization means an FDIC-supervised insured depository institution, including all insured state nonmember banks, insured state-licensed branches of foreign banks, and insured State savings associations; provided, however, that no designated financial market utility shall be considered a banking organization.
  - (2) Bank service provider means a bank service company or other person that performs covered services; provided, however, that no designated financial market utility shall be considered a bank service provider.
  - (3) Business line means a product or service offered by a banking organization to serve its customers or support other business needs.
  - (4) **Computer-security incident—** is an occurrence that results in actual harm to the confidentiality, integrity, or availability of an information system or the information that the system processes, stores, or transmits.
  - (5) **Covered services—** are services performed, by a person, that are subject to the Bank Service Company Act ([12 U.S.C. 1861-1867](/usc/12/1861-1867.md)).
  - (6) **Designated financial market utility—** has the same meaning as set forth at [12 U.S.C. 5462(4)](/usc/12/5462.md?p=4).
  - (7) **Notification incident—** is a computer-security incident that has materially disrupted or degraded, or is reasonably likely to materially disrupt or degrade, a banking organization's—
    - (i) Ability to carry out banking operations, activities, or processes, or deliver banking products and services to a material portion of its customer base, in the ordinary course of business;
    - (ii) Business line(s), including associated operations, services, functions, and support, that upon failure would result in a material loss of revenue, profit, or franchise value; or
    - (iii) Operations, including associated services, functions and support, as applicable, the failure or discontinuance of which would pose a threat to the financial stability of the United States.
  - (8) **Person—** has the same meaning as set forth at [12 U.S.C. 1817(j)(8)(A)](/usc/12/1817.md?p=j-8-A).

## Notes

### Source

Source: 86 FR 66443, Nov. 23, 2021, unless otherwise noted.

### Authority

Authority: 5 U.S.C. 552; 12 U.S.C. 1463, 1464, 1811, 1813, 1817, 1819, 1831, and 1861-1867. Link to an amendment published at 91 FR 38268, June 25, 2026.

### Source

Source: 84 FR 29052, June 21, 2019, unless otherwise noted.