FFIEC IT Examination Handbook

The FFIEC (Federal Financial Institutions Examination Council) IT Examination Handbook is a set of guidelines and best practices for financial institutions in the United States to manage their information technology (IT) and security risks.

The handbook is organized into multiple booklets, each covering a different IT and security topic, such as:

• cybersecurity
• business continuity planning
• cloud computing
• outsourcing technology services.

The handbook provides financial institutions with guidance on how to identify, assess, and mitigate IT risks to ensure the safety and soundness of the financial system.

It emphasises a risk-based approach to IT risk management and provides guidance on risk management practices, such as risk assessments, risk mitigation, and risk monitoring.