FFIEC IT Examination Handbook
Architecture, Infrastructure, and Operations booklet (June 2021) – FFIEC IT Examination Handbook

FFIEC IT Examination Handbook AIO-VII.A.5(a): VII.A.5(a) Access Control Considerations (Architecture, Infrastructure, and Operations)

Management designs cloud access control around the network, hypervisor, virtual machines, APIs, multi-tenancy, attribute and role management and data replication and destruction, addresses the compounding of risk by the volume of virtual machines, defines access control lists for networks and boundaries, hypervisors, virtual machines and APIs, relies on the platform provider's protection of applications and data from leaks such as memory caches, ensures a software-as-a-service provider has no unnecessary access to systems or customer data, and segregates its data from other tenants' applications.

Maintained by Gerard BlokdykControl text last updated

Other controls in Architecture, Infrastructure, and Operations booklet (June 2021) – FFIEC IT Examination Handbook

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.