Banking Agencies Finalize Interagency Guidance On Third-Party Risk Management

On June 6, the three Federal bank regulatory agencies (the Federal Reserve Board ("FRB"), Federal Deposit Insurance Corporation ("FDIC") and Office of the Comptroller of the Currency ("OCC")), issued final interagency guidance on risk management associated with third-party relationships (the "Guidance"). The Guidance is effective immediately.

The Guidance replaces and supersedes each agency's existing third-party guidance "and promotes consistency in the agencies' supervisory approaches toward third-party risk management," and incorporates changes based on comments on the July 2021 proposed guidance.

In comparison to the July 2021 proposed guidance, the Guidance emphasizes a tailored approach to third-party risk management and a banking organization's size, level of risk, complexity, and the nature of risks presented by each third-party relationship. In reviewing each banking organization's third-party risk management risk framework, the agencies stated that they