IT Examiner School - Oct 2023

Internal Use Only

Contract Issues & Considerations

Service Level Agreements (SLAs)

Pricing Methods

Exit Strategies / Data Deconversion

Contract Inducement

11

Internal Use Only

Ongoing Monitoring & Reassessment

Periodic reconciliation of vendor inventory and re ‐ assessment of all vendors regardless of risk or criticality

Monitoring of key SLAs

Monitoring of provider’s financial condition

Periodic re ‐ evaluation of provider’s general control environment and policies (including cybersecurity, business continuity, and insurance coverage)

12