FFIEC IT Examination Handbook
Development, Acquisition, and Maintenance booklet (August 2024) – FFIEC IT Examination Handbook

FFIEC IT Examination Handbook DAM-IV.G: IV.G Microservices (Development, Acquisition, and Maintenance)

What does DAM-IV.G require?

Where microservices are used, management applies effective control practices during acquisition and development to mitigate malfunction and security incidents, such as deploying a service mesh, API gateways, authentication and authorisation between services, secure orchestration of the containers, monitoring and the further practices the booklet describes drawn from NIST SP 800-204 and 800-204A.

Maintained by Gerard BlokdykControl text last updated

Other controls in Development, Acquisition, and Maintenance booklet (August 2024) – FFIEC IT Examination Handbook

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.