Share on LinkedInShare on LinkedIn

ARTICLE · 21 SEPTEMBER 2016

FDIC Updates Its Information Technology Risk Examination Program

The FDIC recently updated its information technology and operations risk (IT) examination procedures to include an integrated assessment of an institution's cybersecurity preparedness.

United StatesFinance and Banking

The FDIC recently updated its information technology and operations risk (IT) examination procedures to include an integrated assessment of an institution's cybersecurity preparedness. The procedures, which are contained in the Information Technology Risk Examination (InTREx) Program, allow for an enhanced, risk-based approach for conducting IT examinations. The Cybersecurity principles and standards contained within the updated program are not stand-alone, independent principles and standards. Rather, they are part of the overall information security and technology oversight function, with each of the InTREx modules containing embedded cybersecurity examination procedures.

To help in the planning of the IT examination, institutions are required to complete an Information Technology profile (ITP) prior to the examination. The ITP replaces the former IT Officer's Questionnaire, and has been developed to ensure that appropriate resources are allocated to the IT

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

See more popular content from