FFIEC IT Examination Handbook
Development, Acquisition, and Maintenance booklet (August 2024) – FFIEC IT Examination Handbook

FFIEC IT Examination Handbook DAM-III.C: III.C Risk Monitoring and Reporting (Development, Acquisition, and Maintenance)

Management monitors and reports the risks of development, acquisition and maintenance, including project management risks such as milestone shifts, negative test results and major requirement changes, cybersecurity, supply chain and emerging technology, in timely, accurate reports with clear metrics and trends and noted deviations from policies, standards and procedures, distributed to stakeholders and the board when necessary in plain terms that relate IT issues to business concerns, so that problems are known in time and stakeholders understand and agree the courses of action.

Maintained by Gerard BlokdykControl text last updated

Other controls in Development, Acquisition, and Maintenance booklet (August 2024) – FFIEC IT Examination Handbook

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.