(a) Certification and report. A covered institution shall submit to the FDIC a certification of compliance and a deposit insurance coverage summary report on or before the compliance date and annually thereafter.

1. (1) The certification must:

   1. (i) Confirm that the covered institution has implemented and successfully tested its information technology system for compliance with this part during the preceding calendar year; and
   2. (ii) Be signed by the covered institution's chief executive officer or chief operating officer.

2. (2) The deposit insurance coverage summary report must include:

   1. (i) A description of any material change to the covered institution's information technology system or deposit taking operations since the prior annual certification;
   2. (ii) The number of deposit accounts, number of different account holders, and dollar amount of deposits by ownership right and capacity code (as listed and described in Appendix A);
   3. (iii) The total number of fully-insured deposit accounts and the total dollar amount of deposits in all such accounts;
   4. (iv) The total number of deposit accounts with uninsured deposits and the total dollar amount of uninsured amounts in all of those accounts; and
   5. (v) By deposit account type, the total number of, and dollar amount of deposits in, deposit accounts for which the covered institution's information technology system cannot calculate deposit insurance coverage using information currently maintained in the covered institution's deposit account records.
3. (3) If a covered institution experiences a significant change in its deposit taking operations, the FDIC may require that it submit a certification of compliance and a deposit insurance coverage summary report more frequently than annually.

(b) FDIC Testing.

1. (1) The FDIC will conduct periodic tests of a covered institution's compliance with this part. These tests will begin no sooner than the last day of the first calendar quarter following the compliance date and would occur no more frequently than on a three-year cycle thereafter, unless there is a material change to the covered institution's information technology system, deposit-taking operations, or financial condition.
2. (2) A covered institution shall provide the appropriate assistance to the FDIC as the FDIC tests the covered institution's ability to satisfy the requirements set forth in this part.