Development, Acquisition, and Maintenance Booklet

The Development, Acquisition, and Maintenance Booklet in the FFIEC IT Examination Handbook outlines supervisory expectations for banks' planning, design, procurement and ongoing upkeep of information-technology systems. It emphasizes risk-based controls throughout the system lifecycle, covering project management, vendor oversight, change-control procedures and testing to ensure security, reliability and compliance with regulatory standards.