FFIEC IT Examination Handbook
Development, Acquisition, and Maintenance booklet (August 2024) – FFIEC IT Examination Handbook

FFIEC IT Examination Handbook DAM-V.D.2: V.D.2 Database Development (Development, Acquisition, and Maintenance)

What does DAM-V.D.2 require?

Database developers understand the types, structures and uses of databases and mitigate their risks (data errors, inappropriate privileges, misuse of legitimate privileges, injection, malware, backup media exposure, unpatched databases, unmanaged sensitive data and human error) by maintaining a database inventory with location, contents and sensitivity, assessing vulnerabilities, managing and removing access rights, logging and monitoring access and usage in real time, blocking inappropriate web requests, backing up, encrypting, training developers in their security responsibilities and choosing databases that meet business and stakeholder objectives.

Maintained by Gerard BlokdykControl text last updated

Other controls in Development, Acquisition, and Maintenance booklet (August 2024) – FFIEC IT Examination Handbook

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.