IT Examiner School, Providence, RI

Contracts • Establish Expectations in the Contract • Define SLAs • Insist on Right to Audit • Agree on Notification Requirements • Document Minimum Certification Requirements • Articulate any Specific Control Requirements

Management Considerations • FIs need to manage their vendor(s) • Senior Management will need to coordinate with Internal and/or External IT support • FIs are still responsible for their data • FIs will still need to manage security access