Proposed guidance would require specific elements in bank policies and programs and could give added significance to FDIC’s proposed industry standard-setting organization

Executive Summary

The federal banking agencies have proposed new third-party risk management guidance that is more prescriptive than its emphasis on a “risk-based” approach might suggest. In addition to calling for risk-based oversight, the proposal identifies specific elements that banks should address in board-approved policies and throughout the life cycle of third-party relationships, including due diligence, contracting, ongoing monitoring, documentation, remediation, and termination.… Continue Reading

On May 3, 2024, the Board of Governors of the Federal Reserve System (the “Federal Reserve”), the Federal Deposit Insurance Corporation (“FDIC”), and the Office of the Comptroller of the Currency (“OCC”) jointly released the “Third-Party Risk Management: A Guide for Community Banks” (the “Guide”), presenting it as a resource for community banks to bolster their third-party risk management programs, policies, and practices.… Continue Reading

The OCC, FDIC, and Federal Reserve Board have issued a guide that is intended to assist community banks in conducting due diligence when considering relationships with financial technology (fintech) companies (Guide).

The issuance of the Guide follows the agencies’ July 2021 release of proposed interagency guidance for banking organizations on managing risks associated with third-party relationships, including relationships with financial technology-focused entities such as bank/fintech sponsorship arrangements. … Continue Reading

The Federal Reserve, FDIC, and OCC have released proposed interagency guidance for banking organizations on managing risks associated with third-party relationships, including relationships with financial technology-focused entities such as bank/fintech sponsorship arrangements.  The proposal is the first time that the three agencies have proposed third-party risk management guidance on an interagency basis. … Continue Reading

Last week, the OCC released its Semiannual Risk Assessment for Fall 2017 highlighting credit, operational, and compliance risks to the federal banking system.  In addition to easing in commercial credit underwriting processes, the increasing complexity of cybersecurity threats, and ongoing challenges in complying with Bank Secrecy Act (BSA) requirements, the other key risks identified by the OCC were increasing concentration in third-party service providers for critical operations and challenges in consumer compliance risk management for banks due to the increasing complexity in consumer compliance regulations. … Continue Reading

The Office of the Comptroller of the Currency has issued a new bulletin (2017-21) containing fourteen frequently asked questions to supplement OCC Bulletin 2013-29 entitled “Third-Party Relationships: Risk Management Guidance.”   The 2013 bulletin provided updated guidance for managing operational, compliance, reputation, strategic, and credit risk presented by third-party business relationships of national banks and federal savings associations.… Continue Reading