FFIEC Release of Information Technology Examination Handbook

The purpose of this letter is to inform you of revised technology-related guidance provided to examiners and the credit union industry. Earlier this year, the Federal Financial Institutions Examination Council (FFIEC¹) released the Information Security Booklet – a first in a series of booklets to revise the existing 1996 FFIEC Information Systems Examination Handbook. The revised Information Technology (IT) Examination Handbook will be composed of several booklets to address significant changes in technology since 1996 and incorporates a risk-based examination approach to each booklet.

The FFIEC agencies plan to issue additional booklets covering such topics as business continuity planning, technology service providers, electronic banking, audit, payment systems, outsourcing, management, computer operations, and systems development and acquisition.

NCUA has made these booklets available electronically to credit unions via the Internet through the FFIEC’s InfoBase application; printed copies of the booklets will not be distributed by NCUA. The InfoBase will include each booklet in Adobe Acrobat PDF file format, as well as on online version with links to various resource materials and an orientation of the handbook update process.

http://ithandbook.ffiec.gov (opens new window) (You will be leaving NCUA.gov and accessing a non-NCUA website. We encourage you to read the NCUA's exit link policies. (opens new page).) . Releases of subsequent booklets will be accompanied by an FFIEC press release.

If you have any questions, please contact your NCUA Regional Office or State Supervisory Authority