FFIEC IT Examination Handbook Info. Base. A  B  C  D  E  F  G  H  I  K  L  M  N  O  P  R  S  T  U  V  W  Z  AAcceptable use policy A document that establishes an agreement between users and the enterprise and defines for all parties the ranges of use that are approved before users can gain access to a network or the Internet. Acceptance Criteria Pre established standards or requirements a product or project must meet. The process of interacting with a system. Account Balancing Monitoring System ABMS The Federal Reserves computing system providing reserve account information to the Federal Reserve Banks and depository institutions on an intraday basis. ABMS serves both as an informational source and a monitoring tool. This information includes opening balances, funds and securities transfers, accounting activity, and depository institutions cap and collateral limits. Account To Account Payment A2. Glossary of Supply Chain Terms. Stymied by stickering Exasperated by XML And just what is Poka Yoke, anyway Let Inbound Logistics glossary of transportation. Since the financial crisis, working capital management has moved up the list of priorities for CFOs and finance directors. With credit remaining expensive and scarce. Office of Foreign Assets ControlOverview. Assess the banks riskbased Office of Foreign Assets Control OFAC compliance program to evaluate whether. The Handbook Of Credit Risk Management Originating Where It Is Found' title='The Handbook Of Credit Risk Management Originating Where It Is Found' />A Payment system that allows the consumer to direct transfer of funds from one account to another account at a different financial institution. Acquirer Fee Fee paid to the acquirer of the merchant sales draft. The acquirer of the sales draft collects a merchant discount fee or processing fee from the merchant for the costs associated with processing the transaction. Acquiring Bank and Acquirer See Merchant acquirer. Address Verification Service AVS Bankcard company service that verifies the customer provided billing address matches the billing address on their credit card account. The bankcard companies will not support merchants that opt for not using AVS if those transactions are disputed and will charge the merchant an additional 1. Administrator privileges Computer system access to resources that are unavailable to most users. Administrator privileges permit execution of actions that would otherwise be restricted. How Do I Uninstall Winzip Registry Optimizer more. Agent Bank A member of a bankcard company that agrees to participate in an acquirers merchant processing program. The agent may be liable for losses incurred on its merchant accounts. An agent is usually a small financial institution that wants to offer merchant processing services as a customer service. Agent banks that only refer merchants to an acquiring financial institutions program are known as referral banks. Aggregate Short Position The sum of a Settlement Members short positions, each such short position expressed in its base currency equivalent and adjusted by the applicable haircut. Aggregate Short Position Limit In respect of a Settlement Member, the maximum aggregate short position that such Settlement Member is permitted to incur at any time. Agility In IT systems, the ability to rapidly incorporate new technologies or changes to technologies allowing an organization to adapt to changing business needs. Air gapped environment Security measure that isolates a secure network from unsecure networks physically, electrically, and electromagnetically. Alternate Site Test Exercise A business continuity testing activity that tests the capability of staff, systems, and facilities, located at sites other than those generally designated for primary processing and business functions, to effectively support production processing and workloads. Staff members participate in testing alternate site facilities through the use of PCs, phones, and other equipment needed to perform testing of business activities. Anomalous activity Activity that deviates from normal. The result of the process of comparing definitions of what activity is considered normal against observed events to identify significant deviations. Antivirusanti malware software A program that monitors a computer or network to identify all types of malware and prevent or contain malware incidents. Application Software that performs automated functions for a user. Examples include home banking, word processing and payroll. Distinguished from operating system or utility software. Application controls Controls related to transactions and data within application systems. Application controls ensure the completeness and accuracy of the records and the validity of the entries made resulting from both programmed processing and manual data entry. Examples of application controls include data input validation, agreement of batch totals and encryption of data transmitted. Application development The process of designing and building code to create a computer program software used for a particular type of job. Application system An integrated set of computer programs designed to serve a well defined function and having specific input, processing, and output activities e. Asset In computer security, a major application, general support system, high impact program, physical plant, mission critical system, personnel, equipment, or a logically related group of systems. Asynchronous data replication A process for copying data from one source to another while the application processing continues an acknowledgement of the receipt of data at the copy location is not required for processing to continue. Consequently, the content of databases stored in alternate facilities may differ from those at the original storage site, and copies of data may not contain current information at the time of a disruption in processing as a result of the time in fractions of a second required to transmit the data over a communications network to the alternate facility. This technology is typically used to transfer data over greater distances than that allowed with synchronous data replication. Asynchronous transfer mode The method of transmitting bits of data one after another with a start bit and a stop bit to mark the beginning and end of each data unit. Can also mean automated teller machine. Attack signature A specific sequence of events indicative of an unauthorized access attempt. Audit charter A document approved by the board of directors that defines the IT audit functions responsibility, authority to review records, and accountability. Audit plan A description and schedule of audits to be performed in a certain period of time ordinarily a year. It includes the areas to be audited, the type of work planned, the high level objectives and scope of the work and includes other items such as budget, resource allocation, schedule dates, and type of report issued. Audit program The audit policies, procedures, and strategies that govern the audit function, including IT audit. Authentication The process of verifying the identity of an individual user, machine, software component, or any other entity. Authorization ACH A written or oral agreement between the originator and a receiver that allows payments processed through the ACH network to be deposited in, or withdrawn from, the receivers account at a financial institution. Automated Clearing House ACH An electronic clearing system in which a data processing center handles payment orders that are exchanged among financial institutions, primarily via telecommunications networks. ACH systems process large volumes of individual payments electronically. Typical ACH payments include salaries, consumer and corporate bill payments, interest and dividend payments, and Social Security payments. Automated Clearing House ACH Operator A central clearing facility that depository financial institutions use to transmit and receive ACH entries. ACH operators are typically a Federal Reserve Bank or a private sector organization that operates on behalf of a depository financial institution. Automated Controls Software routines designed into programs to ensure the validity, accuracy, completeness, and availability of input, processed, and stored data. Automated Teller Machine ATM An electronic funds transfer EFT terminal that allows customers using a PIN based debit ATM card to initiate transactions e. Availability Whether or how often a system is available for use by its intended users.