Regulatory Alerts2022-05-20
Management Ratings for IT Acquisition, Development, and Operations
This document establishes the criteria for rating the management and board oversight of IT acquisition, development, and operations within financial institutions and service providers. It defines a five-tier rating scale from 1 to 5, where lower scores indicate strong risk management and higher scores reflect deficient or critically deficient performance in areas such as strategic planning, compliance, and vendor oversight. The assessment framework evaluates factors including the adequacy of internal controls, the effectiveness of risk monitoring systems, and the ability of management to address audit findings and emerging IT risks.
Share