Board of Governors of the Federal Reserve System

The Federal Financial Institutions Examination Council (FFIEC) has published the "Architecture, Infrastructure, and Operations" (AIO) booklet. The AIO booklet is one in a series of 11 booklets that comprise the FFIEC Information Technology Examination Handbook (IT Handbook). The AIO booklet replaces the current Operations Booklet, which was published in July 2004.

This booklet focuses on enterprise-wide, process-oriented approaches that consider the design of technology within the overall business structure (Architecture), implementation of IT infrastructure components (Infrastructure), and delivery of services and value for customers (Operations).  It discusses the following:

• Principles and practices for IT and operations for safety and soundness, consumer financial protection, and compliance with applicable laws and regulations.
• Processes for addressing risk related to the design and implementation of IT systems.
• Principles to help examiners evaluate the delivery of financial products and services.
• Management oversight of AIO and its related components, including governance; common risk management topics; specific activities of architecture, infrastructure, and operations; and evolving technologies that examiners may encounter during their reviews of AIO.

The AIO booklet and the other booklets in the IT Handbook are available on the FFIEC website at: https://ithandbook.ffiec.gov/it-booklets.aspx.

Reserve Banks are asked to distribute this letter to the supervised organizations in their districts and to appropriate supervisory staff.

In addition, institutions may send questions via the Board’s public website.¹

Notes: