FFIEC IT Examination Handbook
Development, Acquisition, and Maintenance booklet (August 2024) – FFIEC IT Examination Handbook

FFIEC IT Examination Handbook DAM-IV.Q.3: IV.Q.3 Enterprise Risk Management and Supply Chain Risks (Development, Acquisition, and Maintenance)

Supply chain risk management is incorporated into enterprise and technology risk management, recognising that partners may receive sensitive information, that systems or third parties may compromise data integrity and that systems and services may not be available or recoverable, embedded throughout the development life cycle because supply chain activities occur in every phase, with third parties brought into business continuity and resilience activities where applicable.

Maintained by Gerard BlokdykControl text last updated

Other controls in Development, Acquisition, and Maintenance booklet (August 2024) – FFIEC IT Examination Handbook

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.