FFIEC IT Examination Handbook
Outsourcing Technology Services booklet (June 2004) – FFIEC IT Examination Handbook

FFIEC IT Examination Handbook OTS-10: Service Level Agreements (SLAs) (Outsourcing Technology Services)

Management develops SLAs by identifying the significant task-related and organisational elements of the service, devising objective measures, setting measurement frequency and acceptable ranges, and linking the SLAs to the contract's incentive, penalty and cancellation provisions, covering availability and timeliness, confidentiality and integrity of data, change control, security standards compliance including vulnerability and penetration management, business continuity compliance including backup, retention, data protection, contingency plan maintenance, recovery time frames and periodic testing, and help desk support, with no provision that excuses the provider from its contingency plans.

Maintained by Gerard BlokdykControl text last updated

Other controls in Outsourcing Technology Services booklet (June 2004) – FFIEC IT Examination Handbook

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.