Cyber & IT Supervisory Forum - November 2023

Internal Use Only

Technology Service Provider Supervision

When the TSP processes: • mission-critical applications for a large number of financial institutions that are regulated by more than one Agency, thereby posing a high degree of systemic risk; OR • from a number of data centers located in different geographic regions. Significant Service Providers – Coordinated out of DC

Regional Service Providers – Coordinated out of Regions

3

Internal Use Only

Service Provider Coordination

Monthly Meetings with FDIC/FRB/OCC •Tom Fite (IN), Kevin Allard (OH), & Holly Chase (MA)

Incident Coordination and Communication •State and FBAs • FBIIC

4