FFIEC IT Examination Handbook
Management booklet (November 2015) – FFIEC IT Examination Handbook

FFIEC IT Examination Handbook MGT-III.C.3(b): III.C.3(b) Cybersecurity (Management)

What does MGT-III.C.3(b) require?

The institution takes a comprehensive approach to the security and resilience of its IT infrastructure including cybersecurity controls, and although no separate cybersecurity program is required, the information security program identifies, measures, mitigates, monitors and reports the heightened cybersecurity risks across cyber risk management and oversight, threat intelligence and collaboration, cybersecurity controls, external dependency management and cyber incident management and resilience, the five domains of the FFIEC Cybersecurity Assessment Tool.

Maintained by Gerard BlokdykControl text last updated

Other controls in Management booklet (November 2015) – FFIEC IT Examination Handbook

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.