FDIC InTREx: What Documentation Are You Expected to Have?

The FDIC rolled-out the Information Technology Risk Examination procedures (InTREx) in 2016. These procedures are used by FDIC, Federal Reserve, and State Examiners and make expectations regarding required documentation from financial institutions a bit clearer. We hope this list of documentation pulled from the InTREx procedures helps you as you update your Information Security Program documentation and as you prepare for your next IT examination.