s, monitoring transactions, and verifying the validity of change of address requests, in the case of existing covered accounts. (t) Preventing and Mitigating Identity Theft. The program's policies and procedures should provide for appropriate responses to the Red Flags the IBE has detected that are commensurate with th