US Agencies Extend Comment Date for Guide on Managing Third-Party Risk
US Agencies are extending, from September 17, 2021 to October 18, 2021, the comment period on the proposed guidance for the risk management of third-party relationships, including the relationships with financial technology entities. These US Agencies are the Board of Governors of the Federal Reserve System (FED), the Federal Deposit Insurance Corporation (FDIC), and the Office of the Comptroller of the Currency (OCC). The comment period is being extended to allow interested persons more time to analyze the issues and prepare their comments. The proposed guidance is aimed to help banks identify and address the risks associated with third-party relationships and responds to industry feedback requesting alignment among the agencies with respect to third-party risk management guidance.
The proposed guidance considers the level of risk, complexity, and size of the banking organization and the nature of the third-party relationship. It describes third-party relationships as business arrangements between a banking organization and another entity, by contract or otherwise. The proposed guidance emphasizes that a banking organization’s use of third parties does not diminish its responsibility to perform an activity in a safe and sound manner and in compliance with applicable laws and regulations. The proposed guidance also discusses supervisory reviews of third-party relationships and is intended for all third-party relationships; it is especially important for relationships that a banking organization relies on to a significant extent, relationships that entail greater risk and complexity, and relationships that involve critical activities as described in the proposed guidance. The proposed guidance describes the third-party risk management life cycle and identifies principles applicable to each stage of the life cycle, including:
- Developing a plan that outlines the banking organization’s strategy, identifies the inherent risks of the activity with the third party, and details how the banking organization will identify, assess, select, and oversee the third party
- Performing proper due diligence in selecting a third party
- Negotiating written contracts that articulate the rights and responsibilities of all parties
- Having the board of directors and management oversee the banking organization’s risk management processes, maintaining documentation and reporting for oversight accountability, and engaging in independent reviews
- Conducting ongoing monitoring of the third party’s activities and performance
- Developing contingency plans for terminating the relationship in an effective manner
Related Links
Comment Due Date: October 18, 2021
Keywords: Americas, US, Banking, Fintech, Third-Party Service Providers, Regtech, Guidance, Cloud Computing, Third-Party Risk, US Agencies
Related Articles
APRA Issues Interim Update to Policy Priorities for 2021 and Beyond
In a letter addressed to the industry, the Australian Prudential Regulation Authority (APRA) set out an updated schedule of policy priorities for the banking, insurance, and superannuation industries.
EC Adopts Solvency II and Resolution Rules Package for Insurers
The European Commission (EC) adopted a comprehensive review package of Solvency II rules in the European Union.
OCC Issues Booklets on Regulatory Reporting and Earnings
The Office of the Comptroller of the Currency (OCC) issued Versions 1.0 of the "Earnings" and "Regulatory Reporting" booklets of the Comptroller's Handbook.
ECB Sets Out Results of Economy-Wide Climate Stress Tests
The European Central Bank (ECB) published results of its economy-wide climate stress test, which aimed to assess the resilience of non-financial corporates and euro area banks to climate risks.
EBA Examines Implications of Increasing Use of Digital Platforms in EU
The European Banking Authority (EBA) published a report on the use of digital platforms in the banking and payments sector in European Union.
HKMA Issues Updates on Policy Measures Intended to Ease COVID Impact
The Hong Kong Monetary Authority (HKMA) published updates on the policy measures that were announced in context of the ongoing pandemic.
ISDA Responds to BCBS Proposal on Treatment of Cryptoasset Exposures
The International Swaps and Derivatives Association (ISDA), along with several other associations, submitted a joint response to the Basel Committee on Banking Supervision (BCBS) consultation on preliminary proposals for the prudential treatment of cryptoasset exposures.
BIS Quarterly Review Discusses Developments in Fintech and ESG Space
BIS published the September issue of the Quarterly Review, which contains special features that analyze the rapid rise in equity funding for financial technology firms, the effectiveness of policy measures in response to pandemic, and the evolution of international banking.
BCBS to Consult on Supervisory Practices for Climate Risks by Year-End
The Basel Committee for Banking Supervision (BCBS) met in September 2021 and reviewed climate-related financial risks, discussed impact of digitalization, and welcomed efforts by the International Financial Reporting Standards (IFRS) Foundation to develop a common set of sustainability reporting standards
OCC Identifies Operational Risk Deficiencies in MUFG Union Bank
The Office of the Comptroller of the Currency (OCC) issued a Cease and Desist Order against MUFG Union Bank for deficiencies in technology and operational risk governance.
