Managed Security Service Providers Policy
This Managed Security Service Providers Policy addresses measures implemented by a bank, credit union, fintech company, or other type of financial institution that partially or completely outsource the security management function to third-parties (Managed Security Service Providers “MSSPs”).
Table of Contents
- Purpose and Contents – Topic 1
- Policy Statement – Topic 2
- Types of Managed Security Services – Topic 3
- Types of Service Arrangements – Topic 4
- The Risk Assessment and Management Process – Topic 5
- Request for Information and Request for Proposal – Topic 6
- Initial Due Diligence – Topic 7
- Contracts – Topic 8
- Ongoing Oversight and Monitoring – Topic 9
- Contingency and Event Planning – Topic 10
- Cloud Computing – Topic 11
- Audit Policy – Topic 12
- Staff Training – Topic 13
- Retention of Documentation – Topic 14
NOTE: This product is intended to be a supplement to a financial institution’s vendor management policy. For a complete solution, please refer to our Vendor Management Program Policy which contains the full text of this template in addition to other related regulatory guidance.
This Managed Security Service Providers Policy (approximately 16 pages) is available to purchase from BankPolicies.com in Microsoft® Word format.
Product Update Protection Plan
Ensure your purchase from BankPolicies.com remains current by adding a Product Update Protection Plan to your shopping cart. You’ll automatically receive an updated version via e-mail every time it’s revised, within one year from the last date of purchase.
