FFIEC IT Examination Handbook
Architecture, Infrastructure, and Operations booklet (June 2021) – FFIEC IT Examination Handbook

FFIEC IT Examination Handbook AIO-II.F: II.F Board and Senior Management Reporting (Architecture, Infrastructure, and Operations)

What does AIO-II.F require?

Management reports periodically to the board on the status, progress, issues and metrics of AIO initiatives, the board monitors strategy, security and resilience activities regularly to verify they are implemented as envisioned and reviewed periodically and on change, board minutes record significant AIO discussions with credible challenge and approvals, and baseline metrics reported to senior management and the board show the performance of IT and AIO activities, return on IT investment, anomalies and areas for improvement.

Maintained by Gerard BlokdykControl text last updated

Other controls in Architecture, Infrastructure, and Operations booklet (June 2021) – FFIEC IT Examination Handbook

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.