FFIEC IT Examination Handbook
Development, Acquisition, and Maintenance booklet (August 2024) – FFIEC IT Examination Handbook

FFIEC IT Examination Handbook DAM-VII.B.3(a): VII.B.3(a) Routine Modifications (Development, Acquisition, and Maintenance)

What does DAM-VII.B.3(a) require?

Routine or standard modifications such as patches, version updates, firewall changes and hardware replacement follow repeatable, often automated procedures with defined implementation plans, are planned and coordinated with representation from business lines, IT, information security, quality management and audit under centralised oversight such as a change control board, involve trained personnel, and are followed by secured off-site backups of all affected systems and components.

Maintained by Gerard BlokdykControl text last updated

Other controls in Development, Acquisition, and Maintenance booklet (August 2024) – FFIEC IT Examination Handbook

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.