OCC Bulletin 2023-17 | June 6, 2023
Third-Party Relationships: Interagency Guidance on Risk Management
To
Chief Executive Officers of All National Banks, Federal Savings Associations, and Federal Branches and Agencies; Department and Division Heads; All Examining Personnel; and Other Interested Parties
Summary
The Office of the Comptroller of the Currency (OCC), the Board of Governors of the Federal Reserve System (Board), and the Federal Deposit Insurance Corporation (FDIC) (collectively, the agencies) issued the "Interagency Guidance on Third-Party Relationships: Risk Management."
Rescissions
This bulletin rescinds1
- OCC Bulletin 2013-29, "Third-Party Relationships: Risk Management Guidance"
- OCC Bulletin 2020-10, "Third-Party Relationships: Frequently Asked Questions to Supplement OCC Bulletin 2013-29"
Note for Community Banks
This guidance applies to all banks with third-party relationships.2
Highlights
The final interagency guidance
- promotes consistency in the agencies' supervisory approach to third-party risk management.
- outlines the third-party risk management life cycle and identifies risk management considerations throughout the life cycle.
- clarifies that not all third-party relationships present the same level of risk and that risk management should be commensurate with the level of risk and complexity of each third-party relationship.
- describes sound risk management principles to consider when developing and implementing risk management practices for third-party relationships.
Further Information
Please contact Tamara Culler, Director for Governance and Operational Risk Policy, at (202) 649-6550.
Grovetta N. Gardineer Senior Deputy Comptroller for Bank Supervision Policy
Related Link
OCC Bulletin 2002-16, "Bank Use of Foreign-Based Third-Party Service Providers: Risk Management Guidance," remains in effect. ↩︎
"Banks" refers collectively to national banks, federal savings associations, covered savings associations, and federal branches and agencies of foreign banking organizations. ↩︎