FFIEC IT Examination Handbook
Development, Acquisition, and Maintenance booklet (August 2024) – FFIEC IT Examination Handbook

FFIEC IT Examination Handbook DAM-IV.O.1(d): IV.O.1(d) Operations and Maintenance (Development, Acquisition, and Maintenance)

What does DAM-IV.O.1(d) require?

In the operations and maintenance phase personnel continuously monitor performance and adjust the system to user, security and other requirements, manage and document baseline and unique configuration changes and assess their impact on security, functionality, performance and resilience, follow established change management for enhancements and modifications on a periodic or continuous cadence set by business need, and keep systems available during defined hours, implement non-emergency changes in scheduled outages, document manual and automated processes, resource operations and resilience, perform and test backups, and carry out the further tasks the booklet lists.

Maintained by Gerard BlokdykControl text last updated

Other controls in Development, Acquisition, and Maintenance booklet (August 2024) – FFIEC IT Examination Handbook

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.