Information Technology Examination Handbook For U.S. Financial Institutions Updated

Keywords: FFIEC, Information Technology Examination Handbook, information security

The members of the Federal Financial Institutions Examination Council ("FFIEC") have released an update to the Management section of the Information Technology Examination Handbook (the "Handbook").¹ While the Handbook is written for examiners at the U.S. federal banking agencies and for the financial institutions subject to examination, it contains helpful guidance for other entities establishing governance structures and managing information technology ("IT") risk across their enterprises.

The Management section of the Handbook was last updated in 2004. These revisions reflect the development and incorporation of cybersecurity concepts as part of information security. Because of the significant changes in IT and the increased focus on IT risk management, extensive revisions were necessary.