TIMBUKTECH — BANK IT PROVIDER EVALUATION CHECKLIST Prepared September 20, 2026 Use this checklist to scope a conversation. It is not an assurance report or certification. Institution and locations: Current IT owner and other providers: Main objective and relevant timing: 1. Scope: services, exclusions, staffing and accountable contacts. 2. Access: systems and information involved, permissions and controls. 3. Service: support hours, response commitments and escalation. 4. Incidents: responsibilities and communication expectations. 5. Continuity: relevant recovery plans and evidence available. 6. Subcontractors: who is involved and who owns each responsibility. 7. Assurance: request applicable current insurance, reports and references. 8. Reporting: deliverables, review cadence and open-issue ownership. 9. Transition: onboarding, changes, termination and information return. Confirm the availability of particular documents directly with the team. Arrange a secure exchange before providing confidential information. TimbukTech Inc. Canton: 309.647.7269 Macomb: 309.836.7268 Peoria: 309.655.7267 Washington: 309.444.7263