FFIEC IT Examination Handbook
Architecture, Infrastructure, and Operations booklet (June 2021) – FFIEC IT Examination Handbook

FFIEC IT Examination Handbook AIO-III.I: III.I File Exchange (Architecture, Infrastructure, and Operations)

What does AIO-III.I require?

Management addresses the risks of file exchange by email attachment, sharing services and other means (weak or absent encryption, storage on untrusted third-party servers, traversal of untrusted networks, alteration or injection of malicious code, hard-to-use solutions, unapproved or ad hoc methods, shared repository access and version control issues, root causes of exposure) by identifying user needs including senders, recipients, frequency and data nature, designing the client-server architecture for confidentiality, integrity, availability and resilience, and applying the further actions the booklet lists.

Maintained by Gerard BlokdykControl text last updated

Other controls in Architecture, Infrastructure, and Operations booklet (June 2021) – FFIEC IT Examination Handbook

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.