FFIEC IT Examination Handbook
Architecture, Infrastructure, and Operations booklet (June 2021) – FFIEC IT Examination Handbook

FFIEC IT Examination Handbook AIO-III.B.1(a): III.B.1(a) Hardware Inventory (Architecture, Infrastructure, and Operations)

What does AIO-III.B.1(a) require?

Management maintains a hardware inventory covering entity-owned assets, third-party equipment located in the environment such as wire transfer routers and core processing or monitoring devices, and on-premises and cloud virtual infrastructure, with unique identifiers and, for each item, vendor and model, OS version, function, status, memory, storage, processor, owner, connectivity, location, IP and MAC identifiers, criticality, upstream and downstream connections, environment, firmware version, last maintenance and end-of-life date, and covering network and telecommunications equipment including routers, firewalls, intrusion detection and prevention, VPNs, lines and providers.

Maintained by Gerard BlokdykControl text last updated

Other controls in Architecture, Infrastructure, and Operations booklet (June 2021) – FFIEC IT Examination Handbook

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.