FFIEC
What is FFIEC?
The Federal Financial Institutions Examination Council that prescribes uniform principles, standards, and report forms for the federal examination of financial institutions. FFIEC guidance covers cybersecurity, IT, and operational risk.
Terms that appear alongside ffiec
Each of these is named in at least one of the same controls as ffiec. The number is how many controls name both.
- cybersecurity 9 shared controls
- resilience 8 shared controls
- operational resilience 8 shared controls
- governance 7 shared controls
- incident management 7 shared controls
- information security 7 shared controls
- incident response 5 shared controls
- nist 5 shared controls
Frameworks that govern ffiec
What the standards actually require on ffiec
Requirements naming ffiec across 3 standards, quoted from the control text.
Management treats the information security implications of cloud computing as it treats any outsourcing, revising policies, standards and procedures to incorporate the cloud provider's activities in line with the FFIEC statement on outsourced cloud computing.
ffiec-it-examination-handbook::IS-II.C.20(a) · II.C.20(a) Outsourced Cloud Computing (Information Security) →HKMA TM-G-1 coordination + 2024-2025 pipeline. COORDINATION WITH HKMA FRAMEWORKS: (a) HKMA SPM UMBRELLA (separately referenced) - TM-G-1 is one of 60+ SPM modules; SPM provides overall framework + supervisory expectations;
HKMA-TMG1-Coord-SPM-CRAF-Basel-FSB-2024-2025-Pipeline · TM-G-1 Coordination with HKMA SPM, C-RAF v2.0, Basel III, FSB, ISO 27001, NIST CSF and 2024-2025 Pipeline →Each SIG release is mapped to reference documents so one response can serve several frameworks: the 2024 SIG carries direct mappings to 27 reference documents in the content library (among them the 2024 SCA, ISO/IEC 27001 and 27002:2022, ISO/IEC 27701, NIST AI...
sig-shared-assessments::U4 · Use SIG mapping references and keep the questionnaire on the current release →Questions people ask about ffiec
What is FFIEC?
Why is FFIEC important for compliance?
Which compliance frameworks address FFIEC?
Where can I learn more about FFIEC?
See how FFIEC applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.