FFIEC IT Examination Handbook
Architecture, Infrastructure, and Operations booklet (June 2021) – FFIEC IT Examination Handbook

FFIEC IT Examination Handbook AIO-VI.C.4: VI.C.4 Event, Incident, and Problem Management (Architecture, Infrastructure, and Operations)

What does AIO-VI.C.4 require?

Management defines and coordinates event, incident and problem management roles and responsibilities across operations, information security, business continuity and third-party management, tests for interdependencies, and maintains processes that identify the event, incident or problem, determine its impact on customers, employees, revenue, expenses, SLAs and reputation, assign a risk-based severity rating, perform root cause analysis to prevent recurrence, log, track and analyse events and incidents and apply the further steps the booklet lists, so that disruptions are limited and operations restored quickly.

Maintained by Gerard BlokdykControl text last updated

Other controls in Architecture, Infrastructure, and Operations booklet (June 2021) – FFIEC IT Examination Handbook

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.