FFIEC IT Examination Handbook
Development, Acquisition, and Maintenance booklet (August 2024) – FFIEC IT Examination Handbook

FFIEC IT Examination Handbook DAM-II.B.3: II.B.3 Development Roles (Development, Acquisition, and Maintenance)

Development personnel design, build and maintain solutions to business problems, with roles separated in larger entities and overlapping in smaller ones only where mitigating controls exist, segregation of development and implementation duties so developers cannot directly alter production, dual control so no individual or group changes code without approval, and the developer, software engineer, architect, database and other development roles the booklet describes, whether staffed internally or by third parties.

Maintained by Gerard BlokdykControl text last updated

Other controls in Development, Acquisition, and Maintenance booklet (August 2024) – FFIEC IT Examination Handbook

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.