The security officer for each savings association shall report at least annually to the association's board of directors on the implementation, administration, and effectiveness of the security program.