Information Technology Supervision Information

I want to know about...

• IT Regulations
• IT Supervision and Regulation Letters
• IT Guidance
• IT Frequently Asked Questions
• IT Outreach Information
• Who to contact about IT Examinations

IT Regulations

• Regulation H – Interagency Guidelines Establishing Information Security Standards
• Regulation V – Subpart J – Identity Theft Red Flags
• Regulation II (Debit Card Interchange Fees and Routing) – Compliance Guide
• All Regulations
• Also see IT Frequently Asked Questions section below for more information

IT Supervision and Regulation Letters

• IT Supervisory Policy and Guidance Topics
• Supervision and Regulation (SR) Letters – SR letters, address significant policy and procedural matters related to the Federal Reserve System’s supervisory responsibilities
• Cybersecurity
  • SR 21-14 - Authentication and Access to Financial Institution Services and Systems
  • SR 21-11 - FFIEC Architecture, Infrastructure, and Operations Examination Handbook
  • SR 19-13 - FFIEC Information Technology Examination Handbook (Business Continuity Management)
• Incident Response
  • SR 22-4—Contact Information in Relation to Computer-Security Incident Notification Requirements
  • Computer-Security Incident Notification Requirements for Banking Organizations and Their Bank Service Providers
  • SR 05-23 – Interagency Guidance on Response Programs for Unauthorized Access to Customer Information and Customer Notice
  • Quick Reference Guide – Cybersecurity Incident Response and Risk Management

IT Guidance

The Federal Financial Institutions Examination Council (FFIEC) Information Technology Examination Handbook (IT Handbook) provides guidance to examiners and financial institutions on the characteristics of an effective information technology (IT) program.

Details can be found at the following:

• FFIEC Main Page
  • IT Handbook InfoBase
  • Cybersecurity Awareness
    • Cybersecurity Assessment Tool (CAT)
  • Appendix A: Uniform Rating System Information Technology (URSIT)
  • Pandemic Planning

IT Frequently Asked Questions

• Identity Theft Red Flags Program
• Regulation II – Debit Card Interchange Fees and Routing
• Cybersecurity Incident Reporting (coming soon)
• Other IT Supervision Matters (coming soon)

IT Outreach Information

• Speaker Request Form
• Banks Face Growing Cybercrime Threat, Southwest Economy, Fourth Quarter 2019

Who to contact about IT Examinations

• Lorenzo Garza 214-922-5749
• Meeoak Cho 214-922-5960
• Drew Wilson 214-922-6252
• Jason Anthony 214-922-6982