Resources for Federal Financial Institutions Examination Council (FFIEC)

FFIEC: Supervision of Technology Service Providers, IT Examination Handbook

FFIEC

The “Supervision of Technology Service Providers” booklet is one of a series of updates to the 1996 FFIEC Information Systems Examination Handbook and rescinds chapters 2– 7 of that handbook. This booklet primarily governs the supervision of technology service providers (TSPs) and briefly summarizes the Federal Financial Institutions Examination Council (FFIEC) member agencies’ (agencies) expectations of financial institutions in the oversight and management of their TSP relationships. This booklet outlines the agencies’ risk-based supervision approach, the supervisory process, and the examination ratings used for information technology (IT) service providers. In addition, this booklet discusses two special IT-related programs administered by the FFIEC agencies: the Multi-Regional Data Processing Servicer (MDPS) Program, geared towards examining large TSPs, and the Shared Application Software Review (SASR) Program aimed at reviewing mission-critical software packages.

View the Resource

Share or bookmarklet this web page at: