policy

Bank Regulators Extend Comment Period on Third-Party Risk Rules

Summarized from FRB: Press Release - All Releases

Federal banking agencies have granted additional time for public comment on proposed guidance governing how banks manage third-party relationships.

Bank Regulators Extend Comment Period on Third-Party Risk Rules

Federal banking regulators have extended the public comment period for proposed guidance on third-party risk management, giving stakeholders more time to weigh in on rules that would govern how financial institutions oversee outside vendors and service providers.

The extension was announced jointly by the agencies, signaling an effort to broaden industry and public input before finalizing a framework that could affect how banks contract with and supervise third parties ranging from technology firms to payment processors.

Read more Trump Grants 90-Day Jones Act Waiver to Ease Shipping →

Third-party risk management has become an increasingly scrutinized area of bank supervision as financial institutions rely more heavily on outside vendors for core operations. Regulators have expressed concern that weaknesses in vendor oversight can expose banks to operational, compliance, and reputational risks.

The proposed guidance, if finalized, would establish supervisory expectations for how banks identify, assess, and monitor risks associated with third-party arrangements throughout the full lifecycle of those relationships — from due diligence before contracting to ongoing oversight and eventual termination.

The comment period extension provides industry groups, consumer advocates, and individual institutions additional opportunity to submit feedback before regulators move toward a final rule. Continue reading at FRB: Press Release - All Releases.

Frequently Asked Questions

Q.What is the proposed third-party risk management guidance about?

The proposed guidance would establish supervisory expectations for how banks identify, assess, and monitor risks tied to third-party arrangements, covering the full lifecycle from due diligence to contract termination.

Q.Why did regulators extend the comment period?

The agencies extended the comment period to give industry groups, consumer advocates, and financial institutions more time to submit feedback on the proposed rules before they are finalized.

Q.Which agencies are involved in proposing the third-party risk management guidance?

The guidance was proposed jointly by federal banking agencies, as announced in a joint press release from the regulators.

More in policy →