IT Examiner School, Providence, RI

URSIT Composite 2 Tone Tone elements in a URSIT 2 rating • Satisfactory performance • Modest weaknesses • Correctable in normal course • Satisfactory risk management practices • Defined strategic plans • Responds less quickly to changing needs • Management normally identifies weaknesses • Management takes appropriate actions • Financial condition is acceptable and internal control weaknesses may exist

Source: FDIC Technology Exam Communications Series, Part 1: The  Art of Written Comments, January 25, 2017

URSIT Composite 3 Tone Tone elements in a URSIT 3 rating • Less than satisfactory performance • Supervisory concern exist • Moderate to severe weaknesses • Risk management practices not effective • Vaguely defined strategic plans • Difficulty responding to changing needs • Repeat concerns may exist • Management may be unable or unwilling to resolve concerns • Financial condition may be weak • Increased supervision necessary – formal or informal supervisory actions necessary

Source: FDIC Technology Exam Communications Series, Part 1: The  Art of Written Comments, January 25, 2017