Technology & Security

The CDR will use industry standard connection security and access control. Connection security (confidentiality and integrity) to the CDR will be accomplished using the Secure Socket Layer (SSL) to provide encryption between the web browser client or Call Report software and the CDR web server. Encryption will require U.S. domestic encryption standards of 128 bit or higher. Access control will be accomplished via basic authentication (username and password). Each user will have to create a unique username (UserID) and password, and change the password periodically. Additional information regarding financial institution requirements to migrate to, and integrate with the CDR will be provided in the near future.

New Call Report-based Taxonomies and System Specifications

Draft versions of the Call Report taxonomies have been developed using Specification 2.1 of XBRL. Extensions to the XBRL Specification and other guidance and examples can be found in the FFIEC’s CDR Interchange Specification. The FFIEC has created Call Report taxonomies beginning with the March 31, 2001 through June 30, 2005 Call Report dates.

These taxonomies share about 125 items (concepts) with the Bank and Savings Institutions (BASI) taxonomy, which follows U.S. GAAP-General Accepted Accounting Principles. The Call Report taxonomies include a common reference (data names that follow the Federal Reserve Board’s Microdata Reference Manual--MDRM) that incorporates presentation views, business rule formulas, and report instructions.

Current CDR Interchange Specifications

Comments and quesions on these documents can be sent to the Software Vendor Focus Group.

We encourage users to subscribe to the FIND e-mail notification service to receive e-mails when documents have been posted and updates have been made to the FIND web site, including the posting of the sample taxonomies and system specification documents.

Minimum Technical Requirements

It will be essential for all financial institutions to obtain reliable Internet access by the time the CDR is implemented to transmit Call Report data and to receive notifications from the FFIEC agencies related to instructions, technical and data quality errors, and other important information.

To submit your institution's Call Report data to the CDR or view your institution's confidential data, financial institutions must use a web browser (Microsoft Internet Explorer version 6.0) that supports U.S. domestic encryption standards (128 bit or higher).