Sign up for FFIEC IT Handbook InfoBase Email Updates and What’s New RSS Feed
What's NewLink to a feed containing any updates to the FFIEC IT Handbook InfoBase (e.g., booklets, appendices, and joint statements)
GlossaryDefinitions of terms found in or relating to IT booklet concepts
Laws, Regulations, & GuidanceLink to the regulatory resources by IT booklet and further sorted by regulatory agency
ReferencesThis page contains topical materials that supplement booklet content and are for informational purposes
FFIEC IT Booklets
Access all the resources associated with the individual handbooksAudit
Guidance to examiners and financial institutions on the characteristics of an effective information technology (IT) audit function
Business Continuity Management
Guidance to examiners on the principles of BCM and approaches of business continuity planning and resilience; and examination procedures to help determine the effectiveness of business continuity and resilience
Development and Acquisition
Guidance to examiners to determine whether an institution effectively identifies and controls development and acquisition risks
E-Banking
Guidance to examiners on identifying and controlling the risks associated with e-banking activities
Information Security
Guidance to examiners on factors to assess information security risks and procedures to evaluate the adequacy of the information security program
Management
Guidance to examiners outlining the principles of overall governance and IT governance and provides examination procedures to evaluate IT governance and processes for ITRM
Operations
Guidance to examiners on risk management processes for the IT operations universe at institutions and procedures to evaluate controls mitigating risks of IT architecture, infrastructure, and operations
Outsourcing Technology Services
Guidance and examination procedures for examiners evaluate risk management processes to establish, manage, and monitor third-party service provider relationships
Retail Payment Systems
Guidance to examiners on identifying and controlling risks associated with retail payment systems and related banking activities
Supervision of Technology Service Providers
Outlines the Agencies' risk-based supervisory program and includes the examination ratings used for regulated financial institutions and their third-party service providers
Wholesale Payment Systems
Guidance to examiners on the risks and risk management practices when originating and transmitting large-value payments
How to use the IT Examination Handbook InfoBase
The IT Examination Handbook InfoBase Home page (this screen) provides users with access to everything in one place. At the top of the screen, across the banner from left to right, users can get to the FFIEC Infobase Home Page, the IT booklets, IT workprograms, Glossary, and the FFIEC Home Page. By hovering over the IT booklets link in the banner, users can select the booklet they want to see, including a page of archived IT booklets. Users can scroll down past the introduction of the Infobase to opt in to receive e-mail or RSS feed updates when changes are made to the Infobase. Lower in the page, the user can access several pages under solid circles including What’s New, Glossary, Laws, Regulations, & Guidance, and References. Finally, the IT booklets are laid out on the screen, with a description of each, and the ability for the user to select the view they choose, from the Table of Contents, the Online View of the booklet, a Download of the booklet, or a Download of the workprogram. At the bottom of the screen, the user can link to a page containing all of the booklets and workprograms available for single or bulk download.