FFIEC IT Examination Handbook
Development, Acquisition, and Maintenance booklet (August 2024) – FFIEC IT Examination Handbook

FFIEC IT Examination Handbook DAM-VII.B.3(c): VII.B.3(c) Emergency Modifications (Development, Acquisition, and Maintenance)

What does DAM-VII.B.3(c) require?

Management plans for emergency modifications that correct severe unexpected problems after disasters, loss of critical vendors, IT incidents, emergency patches and zero-day vulnerabilities through policies that specify who can declare an emergency, designate an emergency change review group that can meet at short notice, provide an emergency modification plan with contacts and the procedures that differ from standard change control, plan multiple communication methods, identify responsibilities and follow the further steps the booklet lists, with retrospective documentation and review.

Maintained by Gerard BlokdykControl text last updated

Other controls in Development, Acquisition, and Maintenance booklet (August 2024) – FFIEC IT Examination Handbook

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.