FFIEC IT Examination Handbook
Information Security booklet (September 2016) – FFIEC IT Examination Handbook

FFIEC IT Examination Handbook IS-II.C.6: II.C.6 Mitigating Interconnectivity Risk (Information Security)

What does IS-II.C.6 require?

Management mitigates interconnectivity risk by identifying connections with other institutions, intermediaries and third-party providers, all access points and connection types that pose risk (LAN links to other networks or ISPs, Wi-Fi, cellular), connections between low- and high-risk systems and every third-party connection with remote access or control over internal systems, implementing and assessing controls over every connection whatever its criticality, and maintaining network and connectivity diagrams and data flow charts.

Maintained by Gerard BlokdykControl text last updated

Other controls in Information Security booklet (September 2016) – FFIEC IT Examination Handbook

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.