Agencies Issue Statement on Cloud Computing Security

Posted: May 01 2020

With many banks moving some or all employees to remote work arrangements and accessing more cloud-based technologies, the Federal Financial Institutions Examination Council has released a statement on risk management principles for cloud computing security. FFIEC noted that the statement does not contain new regulatory expectations but rather highlights examples of risk management practices.

Such practices include those related to governance; cloud security management; change management; resilience and recovery; and audit and controls assessment.

To read more, visit: https://www.ffiec.gov/press/PDF/FFIEC_Cloud_Computing_Statement.pdf