FFIEC IT Examination Handbook
Development, Acquisition, and Maintenance booklet (August 2024) – FFIEC IT Examination Handbook

FFIEC IT Examination Handbook DAM-VI.E.4: VI.E.4 Contracts (Development, Acquisition, and Maintenance)

What does DAM-VI.E.4 require?

Contracts clearly describe the rights and responsibilities of the parties as formal binding documents, specifying licence rights, rights and liabilities over leased hardware and the consequences of failure, with development and maintenance clauses on functional and performance specifications, milestones and payments, roles, SLA and pricing, controls over foreign-based activity, modification restrictions, objective pre-acceptance performance and security tests and training, hardware clauses and the further provisions the booklet sets out at length.

Maintained by Gerard BlokdykControl text last updated

Other controls in Development, Acquisition, and Maintenance booklet (August 2024) – FFIEC IT Examination Handbook

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.