We perform a review of the institution’s Red Flags and Identity Theft Prevention Program to determine the adequacy of internal risk assessment, policies and procedures governing Red Flags and Identity Theft Prevention under the Fair and Accurate Credit Transactions Act (FACT Act).