My CEO is asking me to audit our business RDC procedures. Normally I use the FFIEC examiners manuals as templates for my audits, but I do not see one that addresses this area specifically. Does anyone know of a template or questionnaire or just any idea of where I should start here?

You might be looking for this:

https://ithandbook.ffiec.gov/it-boo...s/appendix-a-examination-procedures.aspx