{"id":31525,"date":"2023-09-14T05:08:05","date_gmt":"2023-09-14T05:08:05","guid":{"rendered":"https:\/\/www.process.st\/templates\/ffiec-vendor-management-due-diligence-checklist\/"},"modified":"2026-01-13T17:26:51","modified_gmt":"2026-01-13T17:26:51","slug":"ffiec-vendor-management-due-diligence-checklist","status":"publish","type":"post","link":"https:\/\/www.process.st\/templates\/ffiec-vendor-management-due-diligence-checklist\/","title":{"rendered":"FFIEC Vendor Management Due Diligence Checklist"},"content":{"rendered":"\n<section id=\"identify-the-vendor\">\n <h2>Identify the vendor<\/h2>\n <div class=\"image-content\">\n  <figure>\n   <a href=\"https:\/\/ps-attachments.s3.amazonaws.com\/3\/oUVYvn2BAaC7oM-CrSRNwA\/rmbllOZ7rPWKdKA6DP9Png\/FFIEC-Vendor-Management-Due-Diligence.png\" alt=\"Identify the vendor\" target=\"_blank\"> <img decoding=\"async\" loading=\"lazy\" src=\"https:\/\/ps-attachments.s3.amazonaws.com\/3\/oUVYvn2BAaC7oM-CrSRNwA\/rmbllOZ7rPWKdKA6DP9Png\/FFIEC-Vendor-Management-Due-Diligence.png\"> <\/a><!-- No caption -->\n  <\/figure>\n <\/div>\n <div class=\"text-content\">This task involves identifying the vendor that needs to be evaluated for due diligence. Determine the name of the vendor, their contact information, and any relevant background information. Understand the significance of this task in ensuring that the right vendor is selected and their services are properly assessed in terms of compliance and risk management.<\/div>\n <div class=\"text-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Vendor Name <\/label> <input type=\"text\" placeholder=\"Something will be typed here...\" disabled class=\"form-control\">\n  <\/div>\n <\/div>\n <div class=\"text-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Vendor Contact Information <\/label> <input type=\"text\" placeholder=\"Something will be typed here...\" disabled class=\"form-control\">\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"assess-risk-level-of-vendor\">\n <h2>Assess risk level of vendor<\/h2>\n <div class=\"text-content\">Assessing the risk level of the vendor is crucial for effective vendor management. Determine the risk level by considering factors such as the vendor's reputation, financial stability, compliance history, and qualifications. How can you assess the risk level of the vendor? What challenges may arise during this assessment and how can they be addressed?<\/div>\n <div class=\"select-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Risk Level <\/label> <select disabled class=\"form-control\"> <option value=\"An option will be selected here\">An option will be selected here<\/option> <\/select>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">1<\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">Low<\/div>\n   <\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">2<\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">Medium<\/div>\n   <\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">3<\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">High<\/div>\n   <\/li>\n  <\/ul>\n <\/div>\n<\/section>\n<section id=\"collate-all-necessary-documentation-on-vendor\">\n <h2>Collate all necessary documentation on vendor<\/h2>\n <div class=\"text-content\">Collecting all necessary documentation on the vendor is essential for conducting a comprehensive due diligence process. This documentation may include contracts, agreements, financial statements, compliance reports, licenses, and certifications. What specific documents should be collected? How can you ensure that all necessary documentation is obtained?<\/div>\n <div class=\"file-field-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Documentation <\/label>\n   <div class=\"file-container\">\n    <button type=\"button\" disabled class=\"btn btn-default\"><i class=\"fa fa-upload btn-icon\"><\/i> File will be uploaded here<\/button>\n   <\/div>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"review-vendors-financial-stability\">\n <h2>Review vendor\u2019s financial stability<\/h2>\n <div class=\"text-content\">Reviewing the vendor's financial stability is important for assessing their ability to deliver the agreed-upon services and ensure their long-term viability. Analyze the vendor's financial statements, credit ratings, and any other relevant financial information. What factors should be considered when reviewing the vendor's financial stability? How can you determine if the vendor's financial stability meets the required standards?<\/div>\n <div class=\"multi-choice-content form-field-content\">\n  <div class=\"form-group\">\n   <label> Financial Stability Factors <\/label> <select disabled class=\"form-control\"> <option value=\"\">Multiple options can be selected from this list<\/option> <\/select>\n  <\/div>\n  <ul class=\"items\">\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">1<\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">Financial statements<\/div>\n   <\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">2<\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">Credit ratings<\/div>\n   <\/li>\n   <li class=\"item\">\n    <div class=\"step-number-container\">\n     <div class=\"step-number\">3<\/div>\n    <\/div>\n    <div class=\"step-checkbox-container\">\n     <div class=\"step-checkbox\"><\/div>\n    <\/div>\n    <div class=\"item-name-static\">Relevant financial information<\/div>\n   <\/li>\n  <\/ul>\n <\/div>\n<\/section>\n<section id=\"examine-vendors-compliance-history\">\n <h2>Examine vendor\u2019s compliance history<\/h2>\n<\/section>\n<section id=\"confirm-vendors-insurance-coverage\">\n <h2>Confirm vendor\u2019s insurance coverage<\/h2>\n<\/section>\n<section id=\"verify-adequacy-of-vendors-personnel-and-internal-controls\">\n <h2>Verify adequacy of vendor\u2019s personnel and internal controls<\/h2>\n<\/section>\n<section id=\"ensure-vendors-experience-and-qualifications-match-the-service-provided\">\n <h2>Ensure vendor's experience and qualifications match the service provided<\/h2>\n<\/section>\n<section id=\"review-service-level-agreements-with-the-vendor\">\n <h2>Review service level agreements with the vendor<\/h2>\n<\/section>\n<section id=\"approval-vendor-documentation\">\n <h2>Approval: Vendor Documentation<\/h2>\n <div class=\"approval-content\">\n  <div class=\"header\">\n   <div class=\"list-title\">Will be submitted for approval:<\/div>\n  <\/div>\n  <div class=\"approval-rule-subject-tasks-list\">\n   <ul class=\"list\">\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Identify the vendor<\/span>\n        <div class=\"body\">Will be submitted<\/div>\n       <\/div>\n      <\/div>\n     <\/div>\n    <\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Assess risk level of vendor<\/span>\n        <div class=\"body\">Will be submitted<\/div>\n       <\/div>\n      <\/div>\n     <\/div>\n    <\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Collate all necessary documentation on vendor<\/span>\n        <div class=\"body\">Will be submitted<\/div>\n       <\/div>\n      <\/div>\n     <\/div>\n    <\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Review vendor\u2019s financial stability<\/span>\n        <div class=\"body\">Will be submitted<\/div>\n       <\/div>\n      <\/div>\n     <\/div>\n    <\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Examine vendor\u2019s compliance history<\/span>\n        <div class=\"body\">Will be submitted<\/div>\n       <\/div>\n      <\/div>\n     <\/div>\n    <\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Confirm vendor\u2019s insurance coverage<\/span>\n        <div class=\"body\">Will be submitted<\/div>\n       <\/div>\n      <\/div>\n     <\/div>\n    <\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Verify adequacy of vendor\u2019s personnel and internal controls<\/span>\n        <div class=\"body\">Will be submitted<\/div>\n       <\/div>\n      <\/div>\n     <\/div>\n    <\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Ensure vendor's experience and qualifications match the service provided<\/span>\n        <div class=\"body\">Will be submitted<\/div>\n       <\/div>\n      <\/div>\n     <\/div>\n    <\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Review service level agreements with the vendor<\/span>\n        <div class=\"body\">Will be submitted<\/div>\n       <\/div>\n      <\/div>\n     <\/div>\n    <\/li>\n   <\/ul>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"conduct-ongoing-vendor-performance-monitoring\">\n <h2>Conduct ongoing vendor performance monitoring<\/h2>\n<\/section>\n<section id=\"establish-continuity-plan-in-case-of-vendor-failure\">\n <h2>Establish continuity plan in case of vendor failure<\/h2>\n<\/section>\n<section id=\"monitor-the-vendors-compliance-to-agreed-terms\">\n <h2>Monitor the vendor's compliance to agreed terms<\/h2>\n<\/section>\n<section id=\"evaluate-vendors-disaster-recovery-and-business-continuity-plans\">\n <h2>Evaluate vendor's disaster recovery and business continuity plans<\/h2>\n<\/section>\n<section id=\"ensure-vendors-financial-condition-is-not-harming-performance\">\n <h2>Ensure vendor's financial condition is not harming performance<\/h2>\n<\/section>\n<section id=\"update-vendor-risk-ratings-periodically\">\n <h2>Update vendor risk ratings periodically<\/h2>\n<\/section>\n<section id=\"approval-vendor-risk-ratings-update\">\n <h2>Approval: Vendor Risk Ratings Update<\/h2>\n <div class=\"approval-content\">\n  <div class=\"header\">\n   <div class=\"list-title\">Will be submitted for approval:<\/div>\n  <\/div>\n  <div class=\"approval-rule-subject-tasks-list\">\n   <ul class=\"list\">\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Conduct ongoing vendor performance monitoring<\/span>\n        <div class=\"body\">Will be submitted<\/div>\n       <\/div>\n      <\/div>\n     <\/div>\n    <\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Establish continuity plan in case of vendor failure<\/span>\n        <div class=\"body\">Will be submitted<\/div>\n       <\/div>\n      <\/div>\n     <\/div>\n    <\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Monitor the vendor's compliance to agreed terms<\/span>\n        <div class=\"body\">Will be submitted<\/div>\n       <\/div>\n      <\/div>\n     <\/div>\n    <\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Evaluate vendor's disaster recovery and business continuity plans<\/span>\n        <div class=\"body\">Will be submitted<\/div>\n       <\/div>\n      <\/div>\n     <\/div>\n    <\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Ensure vendor's financial condition is not harming performance<\/span>\n        <div class=\"body\">Will be submitted<\/div>\n       <\/div>\n      <\/div>\n     <\/div>\n    <\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Update vendor risk ratings periodically<\/span>\n        <div class=\"body\">Will be submitted<\/div>\n       <\/div>\n      <\/div>\n     <\/div>\n    <\/li>\n   <\/ul>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"document-all-selfassessment-and-independent-reviews-performed\">\n <h2>Document all self-assessment and independent reviews performed<\/h2>\n<\/section>\n<section id=\"retain-all-vendorassociated-records-as-per-regulatory-requirements\">\n <h2>Retain all vendor-associated records as per regulatory requirements<\/h2>\n<\/section>\n<section id=\"ensure-compliance-with-all-ffiec-guidance-on-outsourcing\">\n <h2>Ensure compliance with all FFIEC guidance on outsourcing<\/h2>\n<\/section>\n","protected":false},"excerpt":{"rendered":"<p>Identify the vendor This task involves identifying the vendor that needs to be evaluated for due diligence. Determine the name of the vendor, their contact information, and any relevant background information. Understand the significance of this task in ensuring that the right vendor is selected and their services are properly assessed in terms of compliance [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"ep_exclude_from_search":false,"cover_icon_emoji":"\ud83d\udcdd","cover_icon_url":"","tasks_count":"20","template_description":"","template_id":"oZWyVPtqj1wxRG61E_ZGng","task_0":"Identify the vendor","task_slug_0":"identify-the-vendor","task_1":"Assess risk level of vendor","task_slug_1":"assess-risk-level-of-vendor","task_2":"Collate all necessary documentation on vendor","task_slug_2":"collate-all-necessary-documentation-on-vendor","task_3":"Review vendor\u2019s financial stability","task_slug_3":"review-vendors-financial-stability","task_4":"Examine vendor\u2019s compliance history","task_slug_4":"examine-vendors-compliance-history","task_5":"Confirm vendor\u2019s insurance coverage","task_slug_5":"confirm-vendors-insurance-coverage","task_6":"Verify adequacy of vendor\u2019s personnel and internal controls","task_slug_6":"verify-adequacy-of-vendors-personnel-and-internal-controls","task_7":"Ensure vendor's experience and qualifications match the service provided","task_slug_7":"ensure-vendors-experience-and-qualifications-match-the-service-provided","task_8":"Review service level agreements with the vendor","task_slug_8":"review-service-level-agreements-with-the-vendor","task_9":"Approval: Vendor Documentation","task_slug_9":"approval-vendor-documentation","task_10":"Conduct ongoing vendor performance monitoring","task_slug_10":"conduct-ongoing-vendor-performance-monitoring","task_11":"Establish continuity plan in case of vendor failure","task_slug_11":"establish-continuity-plan-in-case-of-vendor-failure","task_12":"Monitor the vendor's compliance to agreed terms","task_slug_12":"monitor-the-vendors-compliance-to-agreed-terms","task_13":"Evaluate vendor's disaster recovery and business continuity plans","task_slug_13":"evaluate-vendors-disaster-recovery-and-business-continuity-plans","task_14":"Ensure vendor's financial condition is not harming performance","task_slug_14":"ensure-vendors-financial-condition-is-not-harming-performance","task_15":"Update vendor risk ratings periodically","task_slug_15":"update-vendor-risk-ratings-periodically","task_16":"Approval: Vendor Risk Ratings Update","task_slug_16":"approval-vendor-risk-ratings-update","task_17":"Document all self-assessment and independent reviews performed","task_slug_17":"document-all-selfassessment-and-independent-reviews-performed","task_18":"Retain all vendor-associated records as per regulatory requirements","task_slug_18":"retain-all-vendorassociated-records-as-per-regulatory-requirements","task_19":"Ensure compliance with all FFIEC guidance on outsourcing","task_slug_19":"ensure-compliance-with-all-ffiec-guidance-on-outsourcing","task_20":"","task_slug_20":"","task_21":"","task_slug_21":"","task_22":"","task_slug_22":"","task_23":"","task_slug_23":"","task_24":"","task_slug_24":"","task_25":"","task_slug_25":"","task_26":"","task_slug_26":"","task_27":"","task_slug_27":"","task_28":"","task_slug_28":"","task_29":"","task_slug_29":"","task_30":"","task_slug_30":"","task_31":"","task_slug_31":"","task_32":"","task_slug_32":"","task_33":"","task_slug_33":"","task_34":"","task_slug_34":"","task_35":"","task_slug_35":"","task_36":"","task_slug_36":"","task_37":"","task_slug_37":"","task_38":"","task_slug_38":"","task_39":"","task_slug_39":"","task_40":"","task_slug_40":"","task_41":"","task_slug_41":"","task_42":"","task_slug_42":"","task_43":"","task_slug_43":"","task_44":"","task_slug_44":"","task_45":"","task_slug_45":"","task_46":"","task_slug_46":"","task_47":"","task_slug_47":"","task_48":"","task_slug_48":"","task_49":"","task_slug_49":"","task_50":"","task_slug_50":"","task_51":"","task_slug_51":"","task_52":"","task_slug_52":"","task_53":"","task_slug_53":"","task_54":"","task_slug_54":"","task_55":"","task_slug_55":"","task_56":"","task_slug_56":"","task_57":"","task_slug_57":"","task_58":"","task_slug_58":"","task_59":"","task_slug_59":"","task_60":"","task_slug_60":"","task_61":"","task_slug_61":"","task_62":"","task_slug_62":"","task_63":"","task_slug_63":"","task_64":"","task_slug_64":"","task_65":"","task_slug_65":"","task_66":"","task_slug_66":"","task_67":"","task_slug_67":"","task_68":"","task_slug_68":"","task_69":"","task_slug_69":"","task_70":"","task_slug_70":"","task_71":"","task_slug_71":"","task_72":"","task_slug_72":"","task_73":"","task_slug_73":"","task_74":"","task_slug_74":"","task_75":"","task_slug_75":"","task_76":"","task_slug_76":"","task_77":"","task_slug_77":"","task_78":"","task_slug_78":"","task_79":"","task_slug_79":"","task_80":"","task_slug_80":"","task_81":"","task_slug_81":"","task_82":"","task_slug_82":"","task_83":"","task_slug_83":"","task_84":"","task_slug_84":"","task_85":"","task_slug_85":"","task_86":"","task_slug_86":"","task_87":"","task_slug_87":"","task_88":"","task_slug_88":"","task_89":"","task_slug_89":"","task_90":"","task_slug_90":"","task_91":"","task_slug_91":"","task_92":"","task_slug_92":"","task_93":"","task_slug_93":"","task_94":"","task_slug_94":"","task_95":"","task_slug_95":"","task_96":"","task_slug_96":"","task_97":"","task_slug_97":"","task_98":"","task_slug_98":"","task_99":"","task_slug_99":"","footnotes":""},"categories":[192,5,6,84],"tags":[],"class_list":["post-31525","post","type-post","status-publish","format-standard","hentry","category-due-diligence","category-featured","category-finance","category-vendor-management"],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/posts\/31525","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/comments?post=31525"}],"version-history":[{"count":1,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/posts\/31525\/revisions"}],"predecessor-version":[{"id":56146,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/posts\/31525\/revisions\/56146"}],"wp:attachment":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/media?parent=31525"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/categories?post=31525"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/tags?post=31525"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}