FFIEC IT Examination Handbook
Development, Acquisition, and Maintenance booklet (August 2024) – FFIEC IT Examination Handbook

FFIEC IT Examination Handbook DAM-IV.O.1(e): IV.O.1(e) Sunset and Disposal (Development, Acquisition, and Maintenance)

What does DAM-IV.O.1(e) require?

In the sunset and disposal phase management plans the orderly termination of a system and the preservation of entity, client and consumer data through migration, archiving, reassignment or destruction, guards against disclosure, functional impairment, intellectual property loss and reputational damage, periodically validates the accessibility of archived data, and uses a disposal or transition plan with steps, decisions and milestones, decisions on which hardware and software to preserve, data archive and migration, preserved documentation, advance notice to users and stakeholders, end-user migration plans, permanent sanitisation of data, and comprehensive off-boarding procedures covering access, security and data where a third party manages the system or holds the data.

Maintained by Gerard BlokdykControl text last updated

Other controls in Development, Acquisition, and Maintenance booklet (August 2024) – FFIEC IT Examination Handbook

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.