FFIEC IT Examination Handbook
Architecture, Infrastructure, and Operations booklet (June 2021) – FFIEC IT Examination Handbook

FFIEC IT Examination Handbook AIO-III.C.2: III.C.2 Data Flow Diagrams (Architecture, Infrastructure, and Operations)

What does AIO-III.C.2 require?

Management maintains data flow diagrams, combined with network diagrams in a small environment or broken out by line of business, location, segment and function in a large one, that show where data are stored especially sensitive data, where data flow between equipment and systems, data sharing between applications, references to the network diagrams, specific processes and any single points of failure, and data flows within the entity and to third-party providers.

Maintained by Gerard BlokdykControl text last updated

Other controls in Architecture, Infrastructure, and Operations booklet (June 2021) – FFIEC IT Examination Handbook

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.