Home
%3CLINGO-SUB%20id%3D%22lingo-sub-187087%22%20slang%3D%22en-US%22%3ESeven%20Principles%20for%20United%20States%20Financial%20Institutions%20to%20Evaluate%20Cloud%20Service%20Providers%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-187087%22%20slang%3D%22en-US%22%3E%3CP%3EFinancial%20institutions%20are%20looking%20to%20cloud%20computing%20technologies%20to%20reduce%20costs%2C%20improve%20agility%2C%20and%20differentiate%20their%20services.%20Although%20the%20benefits%20are%20clear%2C%20there%20are%20certain%20risks%20with%20the%20cloud%20that%20must%20be%20evaluated%20in%20context%20of%20the%20cloud%20service%20providers%20(CSPs)%20that%20you%20are%20considering.%20It%E2%80%99s%20important%20to%20remember%20that%20not%20all%20CSPs%20are%20the%20same.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIn%20the%20United%20States%2C%20financial%20institutions%20are%20required%20by%20bank%20regulators%20under%20the%20Federal%20Financial%20Institutions%20Examinations%20Council%20(FFIEC)%20to%20manage%20third-party%20relationships%20using%20risk-based%20policies%20and%20procedures%20that%20are%20commensurate%20with%20the%20level%20of%20risk%20posed%20by%20the%20outsourced%20activity.%20Financial%20institutions%20must%20manage%20their%20risk%20by%20understanding%20the%20control%20framework%20and%20operating%20environment%20of%20CSPs%2C%20and%20continue%20to%20have%20oversight%20of%20them.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EFinancial%20institutions%20can%20help%20ensure%20a%20successful%20cloud%20deployment%20by%20following%20seven%20principles%20based%20on%20requirements%20established%20by%20the%20FFIEC%20and%20Microsoft%E2%80%99s%20extensive%20experience%20working%20with%20financial%20institutions%20in%20the%20United%20States.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThe%20principles%20are%3A%3C%2FP%3E%0A%3COL%3E%0A%3CLI%3EConduct%20a%20cost-benefit%20analysis%3C%2FLI%3E%0A%3CLI%3EPerform%20due%20diligence%3C%2FLI%3E%0A%3CLI%3EEnter%20into%20clear%20contracts%20with%20CSPs%3C%2FLI%3E%0A%3CLI%3EEnsure%20effective%20oversight%20and%20monitoring%20of%20the%20CSP%3C%2FLI%3E%0A%3CLI%3EEnsure%20the%20confidentiality%20and%20security%20of%20personal%20and%20financial%20information%3C%2FLI%3E%0A%3CLI%3EDevelop%20and%20test%20contingency%20plans%20and%20exit%20strategies%3C%2FLI%3E%0A%3CLI%3EMaintain%20appropriate%20records%20of%20the%20CSP%20relationship%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3EBy%20following%20these%20principles%2C%20financial%20institutions%20in%20the%20United%20States%20can%20navigate%20regulatory%20requirements%20applicable%20to%20the%20use%20of%20cloud%20services.%20Microsoft%20is%20ready%20to%20support%20financial%20institutions%20in%20implementing%20these%20principles%2C%20so%20they%20can%20deploy%20cloud%20services%20with%20confidence%20and%20take%20advantage%20of%20the%20benefits%20of%20digital%20transformation.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EClick%20%3CA%20href%3D%22https%3A%2F%2Fservicetrust.microsoft.com%2FViewPage%2FTrustDocuments%3Fcommand%3DDownload%26amp%3BdownloadType%3DDocument%26amp%3BdownloadId%3D5b483567-00b0-4d86-96ae-ee887dadb61c%26amp%3BdocTab%3D6d000410-c9e9-11e7-9a91-892aae8839ad_Compliance_Guides%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehere%3C%2FA%3E%20to%20download%20a%20free%20whitepaper%20that%20provides%20recommended%20implementation%20practices%2C%20organized%20by%20these%20seven%20principles.%20You%E2%80%99ll%20learn%20the%20key%20United%20States%20federal%20regulatory%20requirements%20and%20recommended%20implementation%20practices%20that%20guide%20the%20use%20of%20cloud%20computing%20services%20financial%20institutions%20in%20the%20United%20States.%20Microsoft%20is%20ready%20to%20support%20financial%20institutions%20in%20implementing%20these%20principles%2C%20so%20they%20can%20deploy%20cloud%20services%20with%20confidence%20and%20take%20advantage%20of%20the%20benefits%20of%20digital%20transformation.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-187087%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%3EFinancial%20institutions%20are%20looking%20to%20cloud%20computing%20technologies%20to%20reduce%20costs%2C%20improve%20agility%2C%20and%20differentiate%20their%20services.%20Although%20the%20benefits%20are%20clear%2C%20there%20are%20certain%20risks%20with%20the%20cloud%20that%20must%20be%20evaluated%20in%20context%20of%20the%20cloud%20service%20providers%20(CSPs)%20that%20you%20are%20considering.%20It%E2%80%99s%20important%20to%20remember%20that%20not%20all%20CSPs%20are%20the%20same.%3C%2FSPAN%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20695px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F32957i83512944C8862F67%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22Capture.JPG%22%20title%3D%22Capture.JPG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-TEASER%3E
Microsoft

Financial institutions are looking to cloud computing technologies to reduce costs, improve agility, and differentiate their services. Although the benefits are clear, there are certain risks with the cloud that must be evaluated in context of the cloud service providers (CSPs) that you are considering. It’s important to remember that not all CSPs are the same.

 

In the United States, financial institutions are required by bank regulators under the Federal Financial Institutions Examinations Council (FFIEC) to manage third-party relationships using risk-based policies and procedures that are commensurate with the level of risk posed by the outsourced activity. Financial institutions must manage their risk by understanding the control framework and operating environment of CSPs, and continue to have oversight of them.

 

Financial institutions can help ensure a successful cloud deployment by following seven principles based on requirements established by the FFIEC and Microsoft’s extensive experience working with financial institutions in the United States.

 

The principles are:

  1. Conduct a cost-benefit analysis
  2. Perform due diligence
  3. Enter into clear contracts with CSPs
  4. Ensure effective oversight and monitoring of the CSP
  5. Ensure the confidentiality and security of personal and financial information
  6. Develop and test contingency plans and exit strategies
  7. Maintain appropriate records of the CSP relationship

By following these principles, financial institutions in the United States can navigate regulatory requirements applicable to the use of cloud services. Microsoft is ready to support financial institutions in implementing these principles, so they can deploy cloud services with confidence and take advantage of the benefits of digital transformation.

 

Click here to download a free whitepaper that provides recommended implementation practices, organized by these seven principles. You’ll learn the key United States federal regulatory requirements and recommended implementation practices that guide the use of cloud computing services financial institutions in the United States. Microsoft is ready to support financial institutions in implementing these principles, so they can deploy cloud services with confidence and take advantage of the benefits of digital transformation.