FFIEC IT Examination Handbook
Architecture, Infrastructure, and Operations booklet (June 2021) – FFIEC IT Examination Handbook

FFIEC IT Examination Handbook AIO-IV.D: IV.D Enterprise Architecture (Architecture, Infrastructure, and Operations)

What does AIO-IV.D require?

Enterprise architecture describes the entire set of information systems, their configuration, integration, external interfaces, operation and contribution to security, as a baseline state, a target state and a plan to reach it; larger entities implement it to align architecture with strategy, every entity builds security and resilience through its architecture, legacy systems are analysed for functionality gaps to decide whether to maintain, replace or retire them, and the chief architect, internal staff, third parties and an architecture review board may design and oversee it using an industry framework.

Maintained by Gerard BlokdykControl text last updated

Other controls in Architecture, Infrastructure, and Operations booklet (June 2021) – FFIEC IT Examination Handbook

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.