On June 6, 2023, the Federal Deposit Insurance Corporation (“FDIC”), the Board of Governors of the Federal Reserve System (“FRB”) and the Office of the Comptroller of the Currency (“OCC”) (collectively, the “Agencies”) issued final guidance on managing risks associated with third-party relationships, including relationships with fintechs (the “Final Guidance”).1 Effective as of the June 6, 2023 issuance date, the Final Guidance replaces each of the Agencies’ existing guidance on third-party risk management and provides consistency in the Agencies’ supervisory approaches.2 The Final Guidance is directed to all banking organizations supervised by the Agencies and advises such organizations to consider and account for the level of risk, complexity and size of the institution, as well as the nature of the third-party relationship, when conducting sound risk management.
Background and Highlights
On July 19, 2021, the Agencies published proposed guidance for banking organizations on managing risks associated with third-party relationships (the “Proposed Guidance”). The Proposed Guidance was based on the OCC’s existing third-party risk management guidance from…
