Application Security has the potential to fuel one major fire drill in 2009. The Office of the Comptroller of the Currency issued a bulletin underscoring the importance of application security. The OCC’s stance on application security as being part of the same theme: A financial institution can outsource a service, but it cannot cede responsibility for the potential risks to itself and its customers. The sooner you get a handle on vendor management – and demonstrate it to examiners – the better. The results will give you the chance to benchmark your efforts against those of other institutions.”]
Source: https://www.cuinfosecurity.com/blogs/application-security-vendor-management-connection-p-74