Skip to content

FFIEC Cybersecurity Assessment Tool

The Federal Financial Institutions Examination Council (FFIEC) Cybersecurity Assessment Tool helps financial institutions identify cybersecurity risks and determine their cybersecurity preparedness. Developed by U.S. financial regulatory agencies including the Federal Reserve, FDIC, and OCC, this framework provides a repeatable and measurable process for assessing inherent risk and cybersecurity maturity. It applies to all U.S. financial institutions including banks, credit unions, and savings associations.

Terraform Registry Subdomain: ffiec

module "..." {
  source  = "ffiec.compliance.tf/terraform-aws-modules/<module>/aws"
  version = "<version>"
}

module "..." {
  source = "https://ffiec.compliance.tf/terraform-aws-modules/<module>/aws"
}

Refer to the Terraform Registry Endpoints section for more details.

Implemented Controls

The following controls are implemented as part of this framework.

Enable/Disable Controls

You can customize the Terraform module for the desired compliance requirements by enabling/disabling individual controls.

Examples

S3 bucket module with FFIEC Cybersecurity Assessment Tool compliance framework controls enabled, and a couple of controls disabled

module "..." {
  source = "https://ffiec.compliance.tf/terraform-aws-modules/s3-bucket/aws?disable=apigateway_rest_api_stage_use_ssl_certificate,apigateway_stage_logging_enabled"
}