FFIEC IT Examination Handbook
Development, Acquisition, and Maintenance booklet (August 2024) – FFIEC IT Examination Handbook

FFIEC IT Examination Handbook DAM-IV.N.3(c): IV.N.3(c) Feasibility Study (Development, Acquisition, and Maintenance)

What does DAM-IV.N.3(c) require?

A feasibility study, conducted independently of the request team, evaluates a proposed solution's economic, technical, legal and scheduling prospects across business considerations (objectives, effect on operations, an IT security risk assessment, security and resilience requirements, benefits, facility and staffing change, budget, schedule, training and oversight constraints, licensing, legal and regulatory issues, milestones, consumer benefits and risks, supply chain due diligence) and functional requirements (end-user needs, control and security requirements, operating, database, backup, hardware, facility, network, connectivity and interface requirements), with some analysis of needs performed even where a formal study is not.

Maintained by Gerard BlokdykControl text last updated

Other controls in Development, Acquisition, and Maintenance booklet (August 2024) – FFIEC IT Examination Handbook

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.