IT Examiner School, Seaside, CA

Get It In Writing • Establish Expectations in the Contract • Define SLAs • Insist on Right to Audit • Agree on Notification Requirements • Document Minimum Certification Requirements • Articulate any Specific Control Requirements

Management Cannot Forget • FIs need to manage their vendor(s) • Senior Management will need to coordinate with Internal and/or External IT support • FIs are still responsible for their data • FIs will still need to manage security access