Baseline Nonbank Cybersecurity Exam Program

Question 3 - continued

• Rely on audit results, if available • Contact experienced IT examiner, if that resource is available • Use the FFIEC Development and Acquisition booklet for guidance

13

Network/Application Security & Administration

14