FFIEC IT Examination Handbook DAM-VII.B.3(b): VII.B.3(b) Major Modifications (Development, Acquisition, and Maintenance)

What does DAM-VII.B.3(b) require?

Major modifications such as significant functional changes, conversions and systems or data brought in by mergers follow the structured change management process and the SDLC where development is significant, with risks assessed for the modification and all security changes, formal stakeholder discussion before approval, decision criteria covering requirements, feasibility, cost, planning, design, programming, testing and implementation, documentation, communication and training for affected users coordinated with third parties, and the conversion and deconversion practices the booklet describes.