FFIEC IT Examination Handbook
Architecture, Infrastructure, and Operations booklet (June 2021) – FFIEC IT Examination Handbook

FFIEC IT Examination Handbook AIO-VII.A.4: VII.A.4 Shared Responsibilities (Architecture, Infrastructure, and Operations)

What does AIO-VII.A.4 require?

Management reviews the cloud contract carefully and understands the division of shared responsibilities for each service and deployment model, since provider and consumer collaboratively design, build, deploy and operate cloud systems and split control of the underlying infrastructure, hypervisors, platform provisioning and configuration, application settings, data and the further controls the booklet lists, adding controls beyond those the provider offers where its own standards require, and knowing which controls the provider implements for its own operations and which protect the entity's content and applications.

Maintained by Gerard BlokdykControl text last updated

Other controls in Architecture, Infrastructure, and Operations booklet (June 2021) – FFIEC IT Examination Handbook

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.