US Interagency Sound Practices to Strengthen Operational Resilience 4c: Periodic review of third parties' systems and controls reports and test results, with processes and benchmarks for monitoring their ability to deliver during disruptions

What does 4c require?

The firm periodically reads the systems and controls reports, summaries of test results or equivalent assessments of its third parties, and sets processes and benchmarks for monitoring whether a third party can keep delivering during a disruption.