AL 2000–2
Subject: Technology Risk Management Lessons from Year 2000 
Project
Date: March 22, 2000


TO: Chief Executive Officers of National Banks, Federal 
Branches, Service Providers, and Software Vendors; 
Department and Division Heads, and Examining Personnel 


The Federal Financial Institutions Examination Council 
(FFIEC) has released the attached guidance, “Lessons 
Learned from the Year 2000 Project.”  Many of the lessons 
learned from the Year 2000 project can be applied to improve 
future technology risk management processes. 

Because technology-related risks are important in a 
financial institution's overall risk profile, the OCC 
expects management to identify, measure, monitor, and 
control its technology-related risks. Accordingly, we 
encourage you to consider the lessons learned outlined in 
the attached FFIEC document as a way to improve technology 
risk management. 

The guidance is also available on the OCC’s Web site at 
www.occ.treas.gov.  For more information, contact Bank 
Technology at (202) 874-5920. 



                                                     
Mark L. O'Dell
Deputy Comptroller, Core Policy 

Attachment