FFIEC IT Examination Handbook
Architecture, Infrastructure, and Operations booklet (June 2021) – FFIEC IT Examination Handbook

FFIEC IT Examination Handbook AIO-III.B.1(b): III.B.1(b) Software Inventory (Architecture, Infrastructure, and Operations)

What does AIO-III.B.1(b) require?

Management maintains an accurate software inventory recording for each application or database its name and type, developer, vendor, install date, licence renewal and end-of-support dates and expected life, serial number, version, patch level and last patch date, licences and users allowed, environment, owner, whether run internally or hosted at a third party and where, criticality from the software assessment, data classification and physical or virtual location.

Maintained by Gerard BlokdykControl text last updated

Other controls in Architecture, Infrastructure, and Operations booklet (June 2021) – FFIEC IT Examination Handbook

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.