---
title: De-Risk Your IT Services Supply Chain - 7 Keys
description: Stories of surprising supply-chain vulnerabilities exposed by the COVID-19 pandemic are becoming all too familiar. First it was medical supplies – equipment, PPE and swabs. Then it was pharmaceuticals. Less well known are supply-chain vulnerabilities that are hidden from view. Unseen suppliers behind a visible firm are a critical link that can break the chain.
image: https://insights.bankonitusa.com/hubfs/Blog/boi-pattern-08.jpg
---

Sales: [405-653-1920](tel:4056531920) 24/7/365 Support: [1-800-498-8877](tel:18004988877)

[Client Portal](https://portal.bankonitusa.com/)

[![BankOnITUSA](https://insights.bankonitusa.com/hubfs/BOI-Logo-SVG.svg "BankOnITUSA")](https://www.bankonitusa.com/)

- [About](https://www.bankonitusa.com/about/) 
    - [Technology Tour](https://www.bankonitusa.com/about/technology-tour/)
- [Solutions](https://www.bankonitusa.com/solutions/) 
    - [Gain Competitive Advantage](https://www.bankonitusa.com/solutions/gain-competitive-advantage/)
    - [Acheive Operational Efficiency](https://www.bankonitusa.com/solutions/achieve-operational-efficiency/)
    - [Reduce Risk](https://www.bankonitusa.com/solutions/reduce-risk/)
- [Client Stories](https://www.bankonitusa.com/client-stories/) 
    - [Saint Louis Bank](https://www.bankonitusa.com/client-stories/saint-louis-bank/)
    - [Commercial National Bank of Texarkana](https://www.bankonitusa.com/client-stories/commercial-national-bank-of-texarkana/)
    - [Watermark Bank](https://www.bankonitusa.com/client-stories/watermark-bank/)
    - [Integrity Bank & Trust](https://www.bankonitusa.com/client-stories/integrity-bank-and-trust/)
    - [Valliance Bank](https://www.bankonitusa.com/client-stories/valliance-bank/)
    - [First National Bank of Oklahoma](https://www.bankonitusa.com/client-stories/first-national-bank-of-oklahoma/)
    - [Lisle Savings Bank](https://www.bankonitusa.com/client-stories/lisle-savings-bank/)
    - [Bank of Prairie Villiage](https://www.bankonitusa.com/client-stories/bank-of-prairie-village/)
- [Insights](https://insights.bankonitusa.com/) 
    - [Billion $ Playbook](https://www.bankonitusa.com/billion-playbook/)
- [Careers](https://www.bankonitusa.com/careers/)

[Let's Get Started](https://www.bankonitusa.com/lets-get-started/)

 Nov 10, 2025

# [Information Security Brief - November 2025](https://insights.bankonitusa.com/information-security-brief-november-2025)

This Email is Making Me FEEL Something Scammers manipulate your emotions! IS AN EMAIL, TEXT, OR DM MAKING YOU FEEL SUDDEN, URGENT EMOTIONS? “You won o...

[Read More](https://insights.bankonitusa.com/information-security-brief-november-2025)

<https://insights.bankonitusa.com/information-security-brief-november-2025>

- <https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Finsights.bankonitusa.com%2Fde-risk-your-it-services-supply-chain-7-keys>
- <https://www.twitter.com/share?url=https%3A%2F%2Finsights.bankonitusa.com%2Fde-risk-your-it-services-supply-chain-7-keys>
- <http://www.linkedin.com/shareArticle?mini=true&url=https://insights.bankonitusa.com/de-risk-your-it-services-supply-chain-7-keys>
- [mailto:url=https%3A%2F%2Finsights.bankonitusa.com%2Fde-risk-your-it-services-supply-chain-7-keys](mailto:url=https%3A%2F%2Finsights.bankonitusa.com%2Fde-risk-your-it-services-supply-chain-7-keys)

[← Return to Blog](https://insights.bankonitusa.com)

29 Apr, 2020

## De-Risk Your IT Services Supply Chain - 7 Keys

Stories of surprising supply-chain vulnerabilities exposed by the COVID-19 pandemic are becoming all too familiar. First it was medical supplies – equipment, PPE and swabs. Then it was pharmaceuticals.

Less well known are supply-chain vulnerabilities that are hidden from view. Unseen suppliers behind a visible firm are a critical link that can break the chain.

Exposure to supply-chain disruptions for financial institutions is different, but very real. For FI leaders, it’s their *services supply chain* that demands attention.

Banks’ IT services – from servers, firewalls and cloud storage to network security, user support and remote-working capabilities – often are the product of decades of evolving technologies, regulatory requirements and vendor relationships.

The challenges of the COVID-19 pandemic shine a light on potential IT services supply chain risks. Here are seven keys for financial-institution leaders to consider:

1. Keep the number of IT services vendors to a minimum. 
     - Just as in physical supply-chain management, higher numbers mean more complexity, more gaps, more risk and more management time spent managing those risks.
     - Know how many vendors it takes today. Half a dozen? Double-digits? Is that in your comfort zone?
2. Ensure you have the systems and processes in place to manage your IT services vendors.   
     - Consider their support of your banks’ ability to conduct business and meet regulators’ expectations.
3. Understand what it means if you have vendors that are supported by other vendors. 
     - Are these second-tier vendors located offshore?
     - Do the second-tier vendors *also rely on other vendors* – and do they provide services from offshore?
     - Have you performed your due-diligence on those hidden providers through the lens of offshore vs. U.S. location?
4. Ensure your IT services providers have secure, remote-working capabilities, too. 
     - How are your vendors supporting WFH in their operations and how are they ensuring security?
     - Are some of your IT services provided from offshore locations where remote-working may be limited by the lack of high-speed-internet away from the office?
5. Manage the full spectrum of your IT service and spend. 
     - Is your vendor’s service level meeting your institution’s needs?
     - Does your vendor bill for lots of add-on features that your institution needs but are outside your service agreement?
     - How much of the institution’s management and staff time is required to get the results you want?
     - What are your all-in costs for everything IT?
     - If that’s a hard question to answer, consider how under-managed IT costs create undesirable business-performance risk that you can address.
     - Could you get better results and gain efficiencies elsewhere by spending more or spending your IT dollars differently?
6. Scalable IT resources can help de-risk crises. 
     - Were you able to scale up work from home (WFH) capabilities for your employees effectively?
     - Was cybersecurity also able to scale to meet changing risks associated with WFH?
     - Can you downscale your IT resources – while maintaining operational and cybersecurity capabilities – if business needs dictate?
7. Regulatory agencies will focus on business continuity and pandemic-related issues. 
     - Were your plans effective? What changes did you need to make that were beyond your business-continuity and pandemic plans?
     - What plans are you making now to prepare for another round of COVID into the fall of 2020?
     - Do you have the resources you need to continue meeting the needs of your customers?
     - Is your board of directors involved in these discussions and decisions?

De-risking your services supply chain is always a smart move; today it’s a business imperative. Email [BankOnIT](mailto:Guidance@BankOnITUSA.com) to inquire about a complimentary risk-assessment tool your bank can use. Understanding your organization’s current level of risk and biggest areas of opportunity is the right way to start.

*BankOnIT provides comprehensive information technology services for financial institutions across the USA. [www.BankOnITUSA.com](https://www.bankonitusa.com/)*

 

[← Return to Blog](https://insights.bankonitusa.com)

Tags [Reduce Risk](https://insights.bankonitusa.com/tag/reduce-risk)

##### Disclaimer

This publication attempts to provide timely and accurate information concerning the subjects discussed. It is furnished with the understanding that it does not provide legal or other professional services. If legal or other expert assistance is required, the services of a qualified professional should be obtained.

### Search

### Subscribe Here!

You'll receive our latest updates in your inbox.

### Posts by Tag

- [Cybersecurity (52)](https://insights.bankonitusa.com/tag/cybersecurity)
- [Reduce Risk (49)](https://insights.bankonitusa.com/tag/reduce-risk)
- [Information Security Brief (36)](https://insights.bankonitusa.com/tag/information-security-brief)
- [Information Technology for Banking Leaders (15)](https://insights.bankonitusa.com/tag/information-technology-for-banking-leaders)
- [Achieve Operational Efficiency (13)](https://insights.bankonitusa.com/tag/achieve-operational-efficiency)
- [Strategy (11)](https://insights.bankonitusa.com/tag/strategy)
- [CEO Update (9)](https://insights.bankonitusa.com/tag/ceo-update)
- [Gain Competitive Advantage (9)](https://insights.bankonitusa.com/tag/gain-competitive-advantage)
- [Regulation (5)](https://insights.bankonitusa.com/tag/regulation)
- [Information Security Bulletin (2)](https://insights.bankonitusa.com/tag/information-security-bulletin)
- [Regulatory Bulletin (2)](https://insights.bankonitusa.com/tag/regulatory-bulletin)
- [Press Release (1)](https://insights.bankonitusa.com/tag/press-release)

See all

### Popular Posts

#### [CEO Update - Q3 2025](https://insights.bankonitusa.com/ceo-update-q3-2025)

#### [CEO Update - Q4 2025](https://insights.bankonitusa.com/ceo-update-q4-2025)

#### [Information Security Brief - December 2024](https://insights.bankonitusa.com/information-security-brief-december-24)

#### [Information Security Brief - July 2025](https://insights.bankonitusa.com/information-security-brief-july-2025)

## Submit your comment

Upon completion you will be automatically redirected to the electronic Authorized Resellers Agreement.

## Related Posts

<https://insights.bankonitusa.com/information-security-brief-november-2025>

### [Information Security Brief - November 2025](https://insights.bankonitusa.com/information-security-brief-november-2025)

This Email is Making Me FEEL Something Scammers manipulate your emotions!

[Read more](https://insights.bankonitusa.com/information-security-brief-november-2025)

<https://insights.bankonitusa.com/ceo-update-q4-2025>

### [CEO Update - Q4 2025](https://insights.bankonitusa.com/ceo-update-q4-2025)

The AI company Anthropic, best known for its Claude chatbot, did something unexpected. A group of authors had sued the c...

[Read more](https://insights.bankonitusa.com/ceo-update-q4-2025)

<https://insights.bankonitusa.com/information-security-brief-october-2025>

### [Information Security Brief - October 2025](https://insights.bankonitusa.com/information-security-brief-october-2025)

October is Cybersecurity Awareness Month In 2004, the President of the United States and Congress declared October as Cy...

[Read more](https://insights.bankonitusa.com/information-security-brief-october-2025)

Ready to do MORE with BankOnIT?

[Let's Get Started](https://www.bankonitusa.com/lets-get-started/)

**Receive BankOnIT Insights.**

Get timely information on cybersecurity, regulation, and other trends impacting your bank.

#### About

- [Overview](https://www.bankonitusa.com/about/)
- [Technology Tour](https://www.bankonitusa.com/about/technology-tour/)

#### Solutions

- [Overview](https://www.bankonitusa.com/solutions/)
- [Gain Competitive Advantage](https://www.bankonitusa.com/solutions/gain-competitive-advantage/)
- [Achieve Operational Efficiency](https://www.bankonitusa.com/solutions/achieve-operational-efficiency/)
- [Reduce Risk](https://www.bankonitusa.com/solutions/reduce-risk/)

#### Contact

- [Support: 1-800-498-8877](tel:18004988877)
- [Sales: 405-653-1920](tel:4056531920)

#### Social

- [Follow Us On LinkedIn](https://www.linkedin.com/company/bankonitusa/)

![BOI-Logo-PNG](https://insights.bankonitusa.com/hubfs/BOI-Logo-PNG.png "BOI-Logo-PNG")

© 2023 BankOnITUSA, LLC.[Privacy](https://www.bankonitusa.com/privacy-policy/)