Agencies seek comment on proposed third-party risk management guidance and issue statement on community bank engagement with core service providers

The Federal Deposit Insurance Corporation, Federal Reserve Board, National Credit Union Administration, and Office of the Comptroller of the Currency jointly announced today their request for public comment on proposed guidance to help financial institutions manage risks related to third-party relationships. This proposed guidance is based on their supervisory experience and lessons learned from examining institutions' practices in managing these risks.

It aims to assist banks and credit unions in aligning and tailoring their third-party risk management practices according to the specific risks associated with each third-party relationship. The proposed guidance adopts a principles-based approach and, like all regulatory guidance, is non-binding. Upon completion, the agencies intend to replace the current third-party risk management guidance with the finalized version to ensure consistency and foster innovation in the banking sector.

Furthermore, the federal bank regulatory agencies have issued a statement specifically addressing community banks' engagement with core service providers. The statement outlines the key factors that the agencies will take into account when making supervisory and enforcement decisions concerning these core providers. Separately, the Federal Reserve Board has also requested input on a proposed third-party risk management guide tailored for traditionally supervised community banks.

This guide is intended to complement the broader proposed guidance. The Federal Register notices detailing these proposals can be accessed here: Proposed Third-Party Risk Management Guidance, Proposed Third-Party Risk Management Guide for Traditional Community Banking Organizations, and Joint Statement on Community Banks’ Engagement with Core Service Providers.