Financial Institution Letters
April 7, 2014
Technology Outsourcing: Informational Tools for Community Bankers
The three attached FDIC Technology Outsourcing documents are being re-issued as an informational resource to community banks on how to select service providers, draft contract terms, and oversee multiple service providers when outsourcing for technology products and services. The documents are not examination procedures or official guidance but, rather, informational tools.
Statement of Applicability to Institutions with Less than $1 Billion in Total Assets: This Financial Institution Letter (FIL) applies to all FDIC-supervised institutions.
- The attached three documents, first issued on June 4, 2001, contain practical ideas for banks to consider when they engage in technology outsourcing.
- These documents are intended to assist community bankers by providing information on:
- Effective Practices for Selecting a Service Provider,
- Tools to Manage Technology Providers' Performance Risk: Service Level Agreements, and
- Techniques for Managing Multiple Service Providers.
- The attached documents are for informational purposes only and are not considered to be official examination guidance.
- Examination guidance and additional information on vendor management can be found in the FFIEC IT Examination Handbook, Outsourcing Technology Services. This guidance focuses on four key areas: risk assessment, service provider selection, contract terms, and oversight of outsourcing arrangements.
- FDIC-Supervised Banks (Commercial and Savings)
- Chief Executive Officer
- Chief Information Security Officer
- Effective Practices for Selecting a Service Provider - PDF (PDF Help)
- Tools to Manage Technology Providers' Performance Risk: Service Level Agreements - PDF (PDF Help)
- Techniques for Managing Multiple Service Providers. - PDF (PDF Help)
- FFIEC Handbook on Outsourcing Technology Services (June 2004)
- FDIC Guidance for Managing Third-Party Risk (FIL-44-2008) www.fdic.gov/news/news/financial/2008/fil08044.html
- Technology Bulletin on Outsourcing (FIL-50-2001) www.fdic.gov/news/inactive-financial-institution-letters/2001/fil0150.html
- Donald Saxinger, Senior Examination Specialist, at email@example.com or (703) 254-0214
FDIC Financial Institution Letters (FILs) may be accessed from the FDIC's Web site at http://www.fdic.gov/news/news/financial/2014/.
To receive FILs electronically, please visit http://www.fdic.gov/about/subscriptions/fil.html.
Paper copies of may be obtained through the FDIC's Public Information Center, 3501 Fairfax Drive, E-1002, Arlington, VA 22226 (1-877-275-3342 or 703-562-2200).