Banks & Credit Unions
Small financial institutions with an internal IT team — usually a co-managed relationship rather than a handoff.
Industry
Category
Software
Core platforms
Fiserv · Jack Henry · FIS
Lending
Loan origination systems
Branch & endpoint
Teller platforms · identity and device management
Not seeing your software? Tell us what you run. We’ve worked in more than fits on a page.
Sound familiar
Your core is vendor-controlled — Which means the work that matters is at the edges — endpoints, branches, identity and vendor oversight.
Examination pressure never lets up — Findings set your priorities and remediation comes with deadlines.
Your IT team is stretched — There is a team. It's usually two people doing the work of six.
Overseeing vendors is itself an obligation — Which means any provider you use has to be documentable and auditable.
What you’re held to
FFIEC IT Examination Handbook — The framework your examiners work from, covering information security, operations and business continuity. (FFIEC IT Examination Handbook)
Information security program — Interagency guidelines establishing standards. (15 U.S.C. 6801-6809; 12 CFR Part 364 App. B; 12 CFR Part 748)
Bank Secrecy Act — Recordkeeping and reporting obligations. (31 CFR Chapter X)
Third-party risk management — You're required to oversee your service providers, which sets the documentation bar for anyone you work with. (Interagency Guidance on Third-Party Relationships, 2023)
