FFIEC IT Examination Handbook DAM-VI.B: VI.B Acquisition Projects (Development, Acquisition, and Maintenance)

What does DAM-VI.B require?

Acquisition projects are managed under the project management office's processes where one exists and under project guidance and procedures in smaller entities, with the feasibility study defining the IT, information security, functional, legal and regulatory requirements carried into the RFIs, RFPs and RFQs sent to third parties, and the project management principles of the booklet applied throughout.