IT Examiner School eBook

How SSP Supervision Differs

Authority to Examine

Enforcement

Violations

Autonomy

Culture/Attitude

7

SSP Examination Challenges

• Examination responses only viewable via custom file repository; often heavily redacted; and examiners not allowed to download or take screenshots • SSP often referred examiners to workpapers and/or work performed during prior target exams, rather than answering questions or providing documents again • One cloud provider offers 200+ services, so target exams only give a tiny glimpse into that company’s practices and processes

• Responses are not promptly provided, often delaying the review process • Scope of reviews limited to business units that support Client Financial Institutions • Review of materials is limited to binders (e.g., Board minutes) and SSP laptops (e.g., audit reports and workpapers) (Notes only) • Disagreements between FBA team on ECRAs

8