FFIEC IT Examination Handbook MGT-I.A.2(a): I.A.2(a) Executive Management (Management)

Executive management, the CEO, COO and often the CIO, develops the strategic plans and objectives and sets the budget, understands the institution's IT risks at a high level, ensures they are included in the risk assessments, and escalates to the board any objective it cannot implement or course of action it cannot agree.

Maintained by Gerard BlokdykControl text last updated 21 May 2026

Other controls in Management booklet (November 2015) – FFIEC IT Examination Handbook

MGT-I.A.1 I.A.1 Board of Directors Oversight (Management)
MGT-I.A.2(b) I.A.2(b) Chief Information Officer or Chief Technology Officer (Management)
MGT-I.A.2(c) I.A.2(c) Chief Information Security Officer (Management)
MGT-I.A.2(d) I.A.2(d) IT Line Management (Management)
MGT-I.A.2(e) I.A.2(e) Business Unit Management (Management)
MGT-I.A.3 I.A.3 Enterprise Architecture (Management)
MGT-I.B.1 I.B.1 IT Risk Management Structure (Management)
MGT-I.B.2 I.B.2 Information Security (Management)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All FFIEC IT Examination Handbook controls