The FFIEC: An Introduction

This chapter explores the Federal Financial Institutions Examination Council (FFIEC), a crucial organization in financial cybersecurity. The financial industry's landscape has drastically changed since the FFIEC was established, mainly due to technological advancements. The FFIEC's role in the financial industry is multifaceted and extends beyond setting guidelines and standards. The FFIEC Handbook series is an integral resource as a comprehensive financial institution reference. These handbooks guide these institutions in navigating various aspects of their operational management, with cybersecurity being a focal point of their content. The chapter concludes with an overview of the FFIEC Cybersecurity Assessment Tool, illustrating its purpose, components, and how it can be effectively integrated into an organization's cybersecurity program. The Development and Acquisition Handbook provides guidelines and standards for various IT development and acquisition aspects. The handbook begins by discussing the importance of project management in IT development and acquisition.