In my translation of risk mitigation activities and all the other FFIEC documents I have read, it is never explicitly stated that a financial institution must purchase and implement a TECHNOLOGY solution by year-end 2006. [Read more]