FFIEC IT Examination Handbook
Management booklet (November 2015) – FFIEC IT Examination Handbook

FFIEC IT Examination Handbook MGT-III.D.3: III.D.3 Service Level Agreements (Management)

What does MGT-III.D.3 require?

The institution establishes formal, comprehensive service level agreements with its IT providers including affiliates and third parties, and larger institutions consider SLAs for internally provided services, so that mutual expectations are set, IT performance has a baseline, incentives and penalties can be tied to them, and benchmarks and outcome measures reveal where expectations are at risk.

Maintained by Gerard BlokdykControl text last updated

Other controls in Management booklet (November 2015) – FFIEC IT Examination Handbook

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.