FFIEC Information Technology Examination Handbook ...

from various threats. Management should be able to identify and characterize the threats, assess the risks, make decisions regarding the implementation of appropriate controls, and provide appropriate monitoring and reporting. Financial institutions may outsource some or all of their IT-related functions. Although the use ................
................