The feds already have a technology service provider supervision (i.e. 'audit') program through the FFIEC[0], which includes cybersecurity standards. The challe

The feds already have a technology service provider supervision (i.e. 'audit') program through the FFIEC[0], which includes cybersecurity standards. The challenge for regulators is that companies not providing technology infrastructure for depository institutions are not covered. [0] Supervision of Technology Service Providers examination booklet: https://ithandbook.ffiec.gov/it-booklets/supervision-of-technology-service-providers.aspx https://ithandbook.ffiec.gov/it-booklets/supervision-of-tech...