Introduction

This survey is Part 1 of two surveys containing questions to evaluate controls related to managing various the Bank's IT data center operations.  Part 1 includes forty questions and covers these control areas:
  • IT asset management, including End Of Life (EOL) and Shadow IT asset management
  • Performance and capacity management
  • Configuration management
  • Change control
  • Data storage management
  • Event logs, incident response and problem management.
Part 2 covers other control areas, including physical access controls, data backup, and disaster recovery.

Questions are based on guidance from the Federal Financial Institution Examination Council ("FFIEC"), other standards setting organizations, and professional associations.  Most of the questions come from the FFIEC's IT Examination Handbook, primarily from the Architecture, Infrastructure and Operations booklet.

If you have any questions about the survey please call me at 833 434 7475, or e-mail me at john@firiskassessment.com.

Thank you.
John
John Seddon
833 434 7475  (833 4 FI Risk)
john@firskassessment.com
 
2% of survey complete.

T