FFIEC IT Examination Handbook
Development, Acquisition, and Maintenance booklet (August 2024) – FFIEC IT Examination Handbook

FFIEC IT Examination Handbook DAM-II.B.6: II.B.6 Other Common Development, Acquisition, and (Development, Acquisition, and Maintenance)

Common roles are assigned by size and complexity: a configuration or change control board of qualified people that regulates and approves changes to hardware, firmware, software and documentation and reviews and prioritises change requests; testers and quality assurance analysts who create test plans, scenarios and procedures for new or changed systems whether developed or procured, identify, document and report risks and defects, assess usability and functionality, run tests after release, upgrades, maintenance and patches, and cover unit, security, regression and integration testing; and the other roles the booklet lists.

Maintained by Gerard BlokdykControl text last updated

Other controls in Development, Acquisition, and Maintenance booklet (August 2024) – FFIEC IT Examination Handbook

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.