Regulations

I just want to add the guidance doesn't state there is no expectation to perform due diligence on third parties subcontractors. You should evaluate the risk to your organization, and apply mitigation as appropriate. For Gene's organization that mitigation ... More

In the scenario you describe, I agree. If your platform or solution is required to integrate with another, you should be completing a level of due diligence on them. For example, I would expect security checks, pen tests etc. There should still be a ... More

The new Interagency Guidance (FDIC, OCC, Fed) issued in June 23 clarifies that they do not expect us to perform due diligence around our third-party's subcontractors, but expect us to have a very good understanding of what oversight is performed by the ... More

This message was posted by a user wishing to remain anonymous I agree that your org has a responsibility to do due diligence where it is allowing any party (whether a third party or a fourth party) access to its core service which in turn potentially ... More

This message was posted by a user wishing to remain anonymous Thanks for your feedback. I still think it is murky on this issue of responsibility of due diligence as it relates to 3rd party regulations. We have a responsibility to all our customers ... More