FFIEC
Federal Financial Institutions Examination Council
FFIEC, an interagency body of US federal banking regulators
Why It Exists
To give US banking regulators, and the institutions they examine, a consistent, repeatable way to assess technology and cybersecurity risk across the banking system, instead of every examiner improvising their own standard.
Who It's For
US banks, credit unions, and other depository institutions regulated by FFIEC's member agencies (the Federal Reserve, FDIC, OCC, and others), and by extension, the technology vendors and cloud providers those institutions rely on.
Current Status
Not a single certifiable standard like the others on this list. FFIEC publishes and maintains the IT Examination Handbook and the Cybersecurity Assessment Tool, living guidance that examiners use, and gets updated by the member agencies rather than released as numbered versions.
FFIEC IT Examination Handbook InfoBaseFrequently Asked Questions
Other Frameworks
KloudSec, built by the team behind Toc Consulting
See FFIEC checked automatically, continuously
What you just read is a manual, one-time check. KloudSec runs this and 400+ more automated checks across 90+ AWS services, continuously, agentless, live in about 5 minutes.