IT Examiner School

Information Technology Risk Examination Information Technology Profile (ITP) Scoring Matrix

Add the numeric totals from the above categories to derive the gross technology profile score. Categories Score Core Processing 5 Network 20 Online Banking 15 Development and Programming Software and Services Other 10 Gross Technology Profile Score 50 Qualitative Adjustment (if applicable, maximum 10 points) Net Technology Profile Score 50 Qualitative Adjustment The decision to make a qualitative adjustment should be properly founded and documented. Making such an adjustment should be infrequent and the score can be adjusted up or down by 10 points based on qualitative factors such as, but not limited to:  Narrative provided by Licensee on ITP indicating unique characteristics (e.g. significant or unusual situations, critical personnel changes, unknown servicers/vendors)  Previous examination ratings and findings (S&S, IT, Trust, Holding Company)  Enforcement Actions  Fraud red flags/Cyber Incidents  Institution management (strong/weak)  Correspondence  Offsite monitoring  Licensee’s vendors  Reliance on dominant official  Mergers/Acquisitions  Significant growth Lack of available examination resources is not a basis for making a qualitative adjustment. Qualitative Adjustment Comment (if applicable):

January 20XX

C-4