Resources for Payment Card Industry (PCI)

FFIEC: Operations, IT Examination Handbook

FFIEC

This booklet is one in a series that comprise the Federal Financial Institutions Examination Council (FFIEC) Information Technology Handbook (IT Handbook. It provides guidance to examiners and financial institutions1 on risk management processes that promote sound and controlled operation of technology environments. Information is one of the most important assets of an institution, and information technology (IT) operations should process and store information in a timely, reliable, secure, and resilient manner. This booklet addresses IT operations in the context of tactical management and
daily delivery of technology to capture, transmit, process, and store the information assets and support the business processes of the institution. The examination procedures contained in this booklet assist examiners in evaluating an institution’s controls and risk management processes relative to the risks of technology systems and operations that reside in, or are connected to the institution. This booklet rescinds and replaces Chapters 13 “Operations” and 17 “Document Imaging” of the 1996 FFIEC Information Systems Examination Handbook.

View the Resource

Share or bookmarklet this web page at: