资源描述:
《美国FFIEC技术服务外包IT检查手册英文版》由会员上传分享,免费在线阅读,更多相关内容在工程资料-天天文库。
1、ITBooklets:OutsourcingTechnologyServices(美国FFIEC技术服务外包IT检查手册)IntroductionThefinancialservicesindustryhaschangedrapidlyanddramatically.Advancesintechnologyenableinstitutionstoprovidecustomerswithanarrayofproducts,services,anddeliverychannels.OneresuItofthesecha
2、n^esisthatfinancialinstitutionsincreasinglyrelyonexternalserviceprovidersforavarictyoftcchnology-rclatedservices.Generally,theterm"outsourcing"isusedtodescribethesetypesofarrangements.TheFederalFinancialInstitutionsExaminationCouncil(FFIEC)TnformationTechnolog
3、yExaminationHandbook(TTHandbook)/z0utsourcingTechnologyServicesBooklet"(booklet)providesguidaneeandexaminationprocedurestoassistexaminersandbankersinevaluatingafinancialinstitution'sriskmanagementprocessestoestablish,manage,andmonitorIToutsourcingrelationships
4、.Theabilitytocontractfortechnologyservicestypicallyenablesaninstitutiontoofferitscustomersenhancedserviceswithoutthevariousexpensesinvolvedinowningtherequiredtcchnologyormaintainingthehumancapitalrequiredtodeployandoperateit.Inmanysituations,outsourcingofferst
5、heinstitutionacosteffectivealternativetoin-housecapabilities.Outsourcing,however,doesnotreducethefundamentaJrisksassociatedwithinformcitiontechnologyorthebusinesslinesthatuseit.Riskssuchaslossoffunds,lossofcompctitivcadvantage,damagedreputation,improperdisclos
6、ureofinformation,andregulatoryactionremain.Becausethefunctionsareperformedbyanorganizationoutsidethefinancialinstitution,therisksmayberealizedinadifferentmannerthanifthefunctionswereinsidethefinancialinstitutionrcsultingintheneedforcontrolsdesignedtomonitorsuc
7、hrisks.Financialinstitutionscanoutsourcemanyareasofoperations,includingallorpartofanyservice,process,orsystemoperation.Examplesofinformationtechnology(TT)operationsfrequentlyoutsourcedbyinstitutionsandaddressedinthisbookietinelude:theorigination,processing,and
8、settlementofpaymentsandfinancialtransactions;informationprocessingrelatedtocustomeraccountcreationandmaintenance;aswellasotherinformationandtransactionprocessingactivitiesthatsuppo