FFIEC IT Examination Handbook
Architecture, Infrastructure, and Operations booklet (June 2021) – FFIEC IT Examination Handbook

FFIEC IT Examination Handbook AIO-III.B.2: III.B.2 IT Asset End-of-Life (Architecture, Infrastructure, and Operations)

What does AIO-III.B.2 require?

Management captures every IT asset in the inventory, tracks it through its operational life for vendor support announcements and changes in functionality, reliability and speed, implements policies, standards and procedures to identify assets and their end-of-life time frames, track them and replace or upgrade them, addresses end of life in third-party contracts, and for existing technology adds assets and tracks changes, conducts risk assessments to determine end of life, reviews end-of-life dates and plans replacement, since unsupported technology leaves vulnerabilities unpatched.

Maintained by Gerard BlokdykControl text last updated

Other controls in Architecture, Infrastructure, and Operations booklet (June 2021) – FFIEC IT Examination Handbook

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.