What Does the FDIC and CSBS INTREx Entail?
First the Regulators rolled out the Cyber Assessment Tool (CAT), then one year later the FDIC released its new Information Technology Risk Examination Program - or INTREx for short. The examination work program incorporates many of the work steps and review areas from the FFIEC IT Examination Handbook, while drawing from the CAT declarative statements and adopting a focus on cybersecurity.
Along with a new work program, prior to scheduling the examination, you will receive an Information Technology Profile which has replaced the former IT Officer’s Questionnaire. The original Uniform Rating System for Information Technology (URSIT) that includes a rating for each of the four examination components: Management, Audit, Support and Delivery, and Development and Acquisition and assignment of an overall composite rating has been resurrected.
Registration not available.