IT Examiner School, Palm Springs, CA

Regulatory Guidance

• FFIEC IT Handbook: Outsourcing Technology (June 2004- updated in 2012) – Appendix D- Managed Security Service Providers (MSSPs) • FDIC FIL-44-2008: Guidance on Managing Third-Party Risk • FDIC FIL 46-2012: Supervision of Technology Service Providers and Outsourced Technology Services • FIL 13-2014: Technology Outsourcing: Informational Tools for Community Bankers • FDIC FIL 9-2015: Business Continuity Planning Booklet Appendix J Update to FFIEC IT Examination Handbook Series • FIL 19-2016: Technical Assistance Video on Outsourcing Technology Services • FRB SR 13-19/ CA 13-21: Guidance on Managing Outsourcing Risk • FFIEC IT Handbook: Management

Questions