Finosec Official Blog

FFIEC Releases AIO Booklet

FINOSEC posted in Cybersecurity, Innovation, Cyber Attack, Banking, FFIEC, Booklet


The FFIEC AIO (Architecture, Infrastructure, and Operations) is an update to the operations handbook that was released on June 30, 2021. It doubles the size of the existing operations booklet released in 2004, and provides some considerable changes in regulatory expectations. It includes some expanded guidance from the previous booklet (on items such as hardware and software inventories, and environmental controls) as well as brand new areas of guidance (including increased accountability for board and senior management, third party risk management, and evolving technologies). 

Read More