Federal Reserve Board issues enforcement actions with former employee of Atlantic Union Bank and former employee of Frost Bank

When a bank employee misuses customer information or systems, the failure traces to an undocumented access decision made months or years earlier. Someone approved their credentials, their transaction authority, their account scope—but that approval lived in a provisioning ticket or an email chain, not a durable decision record with an owner and a review cadence. The enforcement names individuals, but the governance gap is institutional: banks grant access without producing the artifact that proves the grant was justified, limited, and subject to recertification. Decision Governance turns every access approval into a record—owner, rationale, evidence, outcome—so the bank can demonstrate control before the regulator arrives.