What is NOT true of the Red Flags Rule $($RFR$)?$

An RFR program must include a process to identify the red flags of identity theft that may occur in opening and accessing an account.

An RFR program should have policies and training to detect identity theft and red flags accounts.

The RFR was developed to instruct the Department of Homeland Security $($DHS$)$ to take measures designed to strengthen cybersecurity in the federal government and at federal agencies.

The term "red flag" refers to having processes that look for suspicious indicators of identity theft and to "flag" those accounts for further review and verification of customer identity.