FFIEC IT Examination Handbook
Architecture, Infrastructure, and Operations booklet (June 2021) – FFIEC IT Examination Handbook

FFIEC IT Examination Handbook AIO-VI.A.1: VI.A.1 Operating Centers (Architecture, Infrastructure, and Operations)

What does AIO-VI.A.1 require?

Whether operating centres are physical or cloud based, owned or outsourced, management remains responsible for their oversight, specifies equipment ownership and responsibility in any third-party contract, addresses the security and network management functions of data centres, network operations centres and security operations centres even where a small entity has only a server room, sites operating centres away from environmental threats, and applies smoke, water and power detection and mitigation, fire suppression, security zones, physical security controls and the further measures the booklet lists.

Maintained by Gerard BlokdykControl text last updated

Other controls in Architecture, Infrastructure, and Operations booklet (June 2021) – FFIEC IT Examination Handbook

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.