FFIEC IT Security Booklet Applies to Firms Regulated by CFPB

The Federal Financial Institution Examination Council’s updated Information Security Booklet revises FFIEC’s recommended IT risk management and information security processes, and updates examination procedures to help examiners evaluate an institution’s culture, governance, information security program, security operations, and assurance processes.