Financial Regulators Issue New Booklet on Financial Institutions’ Information Technology Architecture, Infrastructure, and Operations

The Federal Financial Institutions Examination Council (FFIEC) recently issued a new booklet in the FFIEC Information Technology Handbook series, replacing the “Operations” booklet, issued in 2004. The new booklet, titled “Architecture, Infrastructure, and Operations” provides expanded guidance to assist financial institution examiners assess the risk profile of an entity’s information technology architecture, infrastructure, and operations.

The booklet also provides examiners with examination expectations regarding governance and risk management, architecture and infrastructure planning, and operations of regulated entities. The updates highlight the importance of providing current information to examiners reviewing an entity’s information management practices as well as reflect the changing technological environment.