Monday, January 22, 2018

Regulator: Third-Party Risk Management Is A Heightened Supervisory Focus

A bank regulator recently warned that managing third-party risk is a heightened supervisory focus.

The Office of the Comptroller of the Currency (OCC) in its Semiannual Risk Perspective report identified increasing use of third-party service providers and the concentration of critical operations among few service providers as operational concerns.

The report notes a growth in partnerships between banks (you can substitute the term credit unions) and third-party companies or vendors. Financial institutions are becoming more reliant upon third-party financial technology companies for new emerging products and services. This is driving third-party risk.

The report also noted that consolidation -- both among banks and among third-party service providers -- has “increased reliance on a smaller group of third parties providing critical applications and resulted in large numbers of banks, especially community banks, relying on a small number of service providers.”

The report found "instances of concentration of third-party service providers for specialized services, such as merchant card processing, denial-of-service mitigation, ... and other specific product or market service."

This concentration in a limited number of third-party service providers could result in systemic risk in the financial services sector.

The OCC advised that banks address third-party risk "through appropriate due diligence and ongoing oversight."

This should be the same advice to credit unions from the National Credit Union Administration (NCUA), as NCUA does not have the authority to examine third-party service providers, unlike other federal banking regulators.

1 comment:

  1. Credit unions rely on the NCUA to protect, defend and safeguard the NCUSIF (National Credit Union Share Insurance Fund). The NCUA has failed in a most pathetic and miserable way to protect the NCUSIF. The NCUA failed with the Corporate Federal Credit Unions. The NCUA is failing with the Taxi Medallion CU Business Loans. Where is the OIG to provide the due diligence and oversight to the NCUA? Credit Unions pay assessments while the NCUA remains stuck on stupid.

    ReplyDelete

 

The content is provided for educational purposes only, with the understanding that neither the authors, contributors, nor the publishers of this site are engaged in rendering legal, accounting or other expert or professional services. If legal or other expert assistance is required, the services of a competent professional should be sought.

Comments appearing in response to articles appearing on this site do not necessarily reflect the views of the ABA. ABA makes no representations regarding the truth or accuracy of commentary or opinions that may be posted in response to the articles that appear on this website.

The inclusion herein of any link to a website, either in the text of an article or in a comment, does not denote any approval, sponsorship, or endorsement by the ABA, and ABA is not responsible for the content or opinions expressed on those linked websites or related commentary. This content is not licensed to third parties sites and is not affiliated with any third party site. Any reference to the author or this content on any third party site on the Internet is not authorized by the ABA.

It is the policy of the American Bankers Association to comply fully with all antitrust laws. Certain discussions should be considered off-limits, including those that contain competitively sensitive data such as price and cost information, or statements that could be construed as reflecting an attempt or desire to control or influence a particular market or markets. Future pricing or other prospective competitive information should never be shared.