When a bank outsources work, does responsibility go with it?
Source release / verification time: 2026-09-14T06:20:00+09:00
Source release / verification time: 2026-09-14T06:20:00+09:00
US financial regulators sought comment on proposed revisions to interagency guidance for managing risks in financial institutions' third-party relationships.
Federal Reserve Board · press release on proposed third-party risk-management guidance · 2026-09-14T06:20:00+09:00
Location: Official text, relevant tables and technical notes. The timestamp is the source verification time recorded in the existing publication.
Return to this passageIf responsibilities for outside technology firms and core processing services change, banks may also reorganize contracting, monitoring and incident-response procedures.
Federal Reserve Board · press release on proposed third-party risk-management guidance · 2026-09-14T06:20:00+09:00
Location: Official text, relevant tables and technical notes. The timestamp is the source verification time recorded in the existing publication.
Supporting premise: US financial regulators sought comment on proposed revisions to interagency guidance for managi…
Supporting premise: The FDIC, Federal Reserve Board, NCUA and OCC published proposed revisions to interagency guida…
Supporting premise: Four regulators announced revised guidance and a separate statement on core service providers, …
Return to this passageDo not interpret the proposal as an operating outcome before final guidance and official disclosures from institutions and providers verify actual procedural changes.
Supporting premise: US financial regulators sought comment on proposed revisions to interagency guidance for managi…
Supporting premise: The FDIC, Federal Reserve Board, NCUA and OCC published proposed revisions to interagency guida…
Supporting premise: Four regulators announced revised guidance and a separate statement on core service providers, …
Return to this passageThe FDIC, Federal Reserve Board, NCUA and OCC published proposed revisions to interagency guidance on third-party relationship risk management. The proposal is principles-based and nonbinding, with comments accepted for 60 days after Federal Register publication.
Federal Reserve Board · press release on proposed third-party risk-management guidance · 2026-09-14T06:20:00+09:00
Location: Official text, relevant tables and technical notes. The timestamp is the source verification time recorded in the existing publication.
Return to this passageBanks retain responsibility for customer protection, information management and business continuity when using outside processing, cloud or fintech providers. Classifying risks by relationship may lead them to reorganize evidence for supplier selection, contracts, monitoring, incident response and termination.
Federal Reserve Board · press release on proposed third-party risk-management guidance · 2026-09-14T06:20:00+09:00
Location: Official text, relevant tables and technical notes. The timestamp is the source verification time recorded in the existing publication.
Supporting premise: US financial regulators sought comment on proposed revisions to interagency guidance for managi…
Supporting premise: The FDIC, Federal Reserve Board, NCUA and OCC published proposed revisions to interagency guida…
Supporting premise: Four regulators announced revised guidance and a separate statement on core service providers, …
Return to this passageThis document is a proposal. Update the interpretation only when final guidance, a community-bank guide and official disclosures from institutions and core providers verify real procedural changes. This commentary does not recommend investment actions.
Supporting premise: US financial regulators sought comment on proposed revisions to interagency guidance for managi…
Supporting premise: The FDIC, Federal Reserve Board, NCUA and OCC published proposed revisions to interagency guida…
Supporting premise: Four regulators announced revised guidance and a separate statement on core service providers, …
Return to this passageThe 2023 final interagency guidance is a historical learning example presenting planning, selection, contracting, ongoing monitoring and termination as one risk-management process. It is not observational evidence for the current proposal.
Federal Reserve Board · press release on 2023 final interagency third-party risk-management guidance · 2026-09-14T06:20:00+09:00
Location: Official text, relevant tables and technical notes. The timestamp is the source verification time recorded in the existing publication.
Supporting premise: US financial regulators sought comment on proposed revisions to interagency guidance for managi…
Supporting premise: The FDIC, Federal Reserve Board, NCUA and OCC published proposed revisions to interagency guida…
Supporting premise: Four regulators announced revised guidance and a separate statement on core service providers, …
Return to this passageFour regulators announced revised guidance and a separate statement on core service providers, and opened a comment period.
Federal Reserve Board · press release on proposed third-party risk-management guidance · 2026-09-14T06:20:00+09:00
Location: Official text, relevant tables and technical notes. The timestamp is the source verification time recorded in the existing publication.
Return to this passageConnect consultation results, final guidance and subsequent institution and provider disclosures within the same event sequence.
Supporting premise: US financial regulators sought comment on proposed revisions to interagency guidance for managi…
Supporting premise: The FDIC, Federal Reserve Board, NCUA and OCC published proposed revisions to interagency guida…
Supporting premise: Four regulators announced revised guidance and a separate statement on core service providers, …
Return to this passageProposed third-party guidance → reassessment of relationship risks and responsibilities → possible selection, contracting and monitoring adjustments → possible changes in control-evidence demands on core and cloud providers → check subsequent official disclosures → revise the interpretation
Supporting premise: US financial regulators sought comment on proposed revisions to interagency guidance for managi…
Supporting premise: The FDIC, Federal Reserve Board, NCUA and OCC published proposed revisions to interagency guida…
Supporting premise: Four regulators announced revised guidance and a separate statement on core service providers, …
Return to this passageAdditional operating changes may be limited if the final guidance largely preserves existing procedures or sufficiently simplifies application by firm size. Both possibilities remain open until the final document is available.
Federal Reserve Board · press release on proposed third-party risk-management guidance · 2026-09-14T06:20:00+09:00
Location: Official text, relevant tables and technical notes. The timestamp is the source verification time recorded in the existing publication.
Supporting premise: US financial regulators sought comment on proposed revisions to interagency guidance for managi…
Supporting premise: The FDIC, Federal Reserve Board, NCUA and OCC published proposed revisions to interagency guida…
Supporting premise: Four regulators announced revised guidance and a separate statement on core service providers, …
Return to this passageRegulators sought comment on principles-based, nonbinding revisions to guidance for managing third-party relationship risks.
Supporting premise: US financial regulators sought comment on proposed revisions to interagency guidance for managi…
Supporting premise: The FDIC, Federal Reserve Board, NCUA and OCC published proposed revisions to interagency guida…
Supporting premise: Four regulators announced revised guidance and a separate statement on core service providers, …
Return to this passageMore detailed relationship risk classifications may lead banks to document supplier selection, contracts, monitoring and responsibilities again.
Supporting premise: US financial regulators sought comment on proposed revisions to interagency guidance for managi…
Supporting premise: The FDIC, Federal Reserve Board, NCUA and OCC published proposed revisions to interagency guida…
Supporting premise: Four regulators announced revised guidance and a separate statement on core service providers, …
Return to this passageRequirements for control evidence and incident-response information may change for core processing, cloud and fintech providers.
Supporting premise: US financial regulators sought comment on proposed revisions to interagency guidance for managi…
Supporting premise: The FDIC, Federal Reserve Board, NCUA and OCC published proposed revisions to interagency guida…
Supporting premise: Four regulators announced revised guidance and a separate statement on core service providers, …
Return to this passageStrengthen the interpretation only when final guidance and official institution and provider disclosures verify actual contract and control changes.
Supporting premise: US financial regulators sought comment on proposed revisions to interagency guidance for managi…
Supporting premise: The FDIC, Federal Reserve Board, NCUA and OCC published proposed revisions to interagency guida…
Supporting premise: Four regulators announced revised guidance and a separate statement on core service providers, …
Return to this passageUsing a supplier changes who performs the work, but the institution retains responsibility for customers, information and continuity. Examine relationship risks, contracts, monitoring and termination in sequence.
Supporting premise: US financial regulators sought comment on proposed revisions to interagency guidance for managi…
Supporting premise: The FDIC, Federal Reserve Board, NCUA and OCC published proposed revisions to interagency guida…
Supporting premise: Four regulators announced revised guidance and a separate statement on core service providers, …
Return to this passageIdentify which critical activities and information depend on suppliers. Check contractual control and incident-response responsibilities. Examine evidence for performance, security and continuity. Verify that switching providers and recovering data can work when problems arise.
Supporting premise: US financial regulators sought comment on proposed revisions to interagency guidance for managi…
Supporting premise: The FDIC, Federal Reserve Board, NCUA and OCC published proposed revisions to interagency guida…
Supporting premise: Four regulators announced revised guidance and a separate statement on core service providers, …
Return to this passageDoes using an outside provider transfer all the associated risks?
Return to this passageNo. Outsourcing execution leaves customer, information and operating responsibilities with the financial institution, requiring controls for each relationship.
Supporting premise: US financial regulators sought comment on proposed revisions to interagency guidance for managi…
Supporting premise: The FDIC, Federal Reserve Board, NCUA and OCC published proposed revisions to interagency guida…
Supporting premise: Four regulators announced revised guidance and a separate statement on core service providers, …
Return to this passageDoes publication of a proposal immediately mean procedures changed?
Return to this passageNo. Consultation, final documents and evidence of actual application need separate checks.
Supporting premise: US financial regulators sought comment on proposed revisions to interagency guidance for managi…
Supporting premise: The FDIC, Federal Reserve Board, NCUA and OCC published proposed revisions to interagency guida…
Supporting premise: Four regulators announced revised guidance and a separate statement on core service providers, …
Return to this passageThe current source proposes revised third-party risk-management guidance. Final documents and company-specific application evidence are needed to assess industry outcomes.
Supporting premise: US financial regulators sought comment on proposed revisions to interagency guidance for managi…
Supporting premise: The FDIC, Federal Reserve Board, NCUA and OCC published proposed revisions to interagency guida…
Supporting premise: Four regulators announced revised guidance and a separate statement on core service providers, …
Return to this passageCheck how relationship risk classifications affect selection, contracts and monitoring. Compare final guidance and the community-bank guide with supplier-management and operational-risk disclosures. Lower the expected additional change if final guidance is substantively similar to existing procedures.
Supporting premise: US financial regulators sought comment on proposed revisions to interagency guidance for managi…
Supporting premise: The FDIC, Federal Reserve Board, NCUA and OCC published proposed revisions to interagency guida…
Supporting premise: Four regulators announced revised guidance and a separate statement on core service providers, …
Return to this passageCheck whether provider control evidence and incident-response information requirements change. Examine supervisory explanations and provider disclosures on controls, incidents and switching procedures. Withhold supply-chain change conclusions if responsibilities and evidence requirements remain at existing contractual levels.
Supporting premise: US financial regulators sought comment on proposed revisions to interagency guidance for managi…
Supporting premise: The FDIC, Federal Reserve Board, NCUA and OCC published proposed revisions to interagency guida…
Supporting premise: Four regulators announced revised guidance and a separate statement on core service providers, …
Return to this passageCheck whether risk classification and evidence-management procedures create demand for monitoring, security and continuity support. Follow institutional implementation plans into actual contracts and service scope. Lower the expected outside-support change if existing staff and procedures suffice.
Supporting premise: US financial regulators sought comment on proposed revisions to interagency guidance for managi…
Supporting premise: The FDIC, Federal Reserve Board, NCUA and OCC published proposed revisions to interagency guida…
Supporting premise: Four regulators announced revised guidance and a separate statement on core service providers, …
Return to this passageBehind customer-facing financial services, multiple suppliers may provide core processing, cloud services, data processing and security checks.
Federal Reserve Board · press release on proposed third-party risk-management guidance · 2026-09-14T06:20:00+09:00
Location: Official text, relevant tables and technical notes. The timestamp is the source verification time recorded in the existing publication.
Supporting premise: US financial regulators sought comment on proposed revisions to interagency guidance for managi…
Supporting premise: The FDIC, Federal Reserve Board, NCUA and OCC published proposed revisions to interagency guida…
Supporting premise: Four regulators announced revised guidance and a separate statement on core service providers, …
Return to this passageRegulators also published a separate statement on community banks' relationships with core service providers.
Federal Reserve Board · press release on proposed third-party risk-management guidance · 2026-09-14T06:20:00+09:00
Location: Official text, relevant tables and technical notes. The timestamp is the source verification time recorded in the existing publication.
Return to this passageConcentration, incident propagation and switching difficulty become clearer only when bank and provider contracts, monitoring and recovery procedures are examined together.
Supporting premise: US financial regulators sought comment on proposed revisions to interagency guidance for managi…
Supporting premise: The FDIC, Federal Reserve Board, NCUA and OCC published proposed revisions to interagency guida…
Supporting premise: Four regulators announced revised guidance and a separate statement on core service providers, …
Return to this passageProvider-specific contract, incident and recovery evidence has not been jointly verified for this event.
Supporting premise: US financial regulators sought comment on proposed revisions to interagency guidance for managi…
Supporting premise: The FDIC, Federal Reserve Board, NCUA and OCC published proposed revisions to interagency guida…
Supporting premise: Four regulators announced revised guidance and a separate statement on core service providers, …
Return to this passageThe proposed guidance calls for an approach tailored to each third-party relationship's risks.
Federal Reserve Board · press release on proposed third-party risk-management guidance · 2026-09-14T06:20:00+09:00
Location: Official text, relevant tables and technical notes. The timestamp is the source verification time recorded in the existing publication.
Return to this passageMore concrete risk classification and evidence management may also change security review, recordkeeping and continuity-support procedures.
Supporting premise: US financial regulators sought comment on proposed revisions to interagency guidance for managi…
Supporting premise: The FDIC, Federal Reserve Board, NCUA and OCC published proposed revisions to interagency guida…
Supporting premise: Four regulators announced revised guidance and a separate statement on core service providers, …
Return to this passageFinal guidance and institution-specific application evidence have not yet been published.
Supporting premise: US financial regulators sought comment on proposed revisions to interagency guidance for managi…
Supporting premise: The FDIC, Federal Reserve Board, NCUA and OCC published proposed revisions to interagency guida…
Supporting premise: Four regulators announced revised guidance and a separate statement on core service providers, …
Return to this passageThe 2023 official text describes planning, selection, contracting, ongoing monitoring and termination as a continuous third-party risk-management process.
Federal Reserve Board · press release on 2023 final interagency third-party risk-management guidance · 2026-09-14T06:20:00+09:00
Location: Official text, relevant tables and technical notes. The timestamp is the source verification time recorded in the existing publication.
Supporting premise: US financial regulators sought comment on proposed revisions to interagency guidance for managi…
Supporting premise: The FDIC, Federal Reserve Board, NCUA and OCC published proposed revisions to interagency guida…
Supporting premise: Four regulators announced revised guidance and a separate statement on core service providers, …
Return to this passageAssess the current event only from the 2026 proposal and subsequent final documents. Do not assume 2023 implementation outcomes repeat.
Supporting premise: US financial regulators sought comment on proposed revisions to interagency guidance for managi…
Supporting premise: The FDIC, Federal Reserve Board, NCUA and OCC published proposed revisions to interagency guida…
Supporting premise: Four regulators announced revised guidance and a separate statement on core service providers, …
Return to this passageThe official source presents principles-based proposed revisions that address risks according to each relationship.
Federal Reserve Board · press release on proposed third-party risk-management guidance · 2026-09-14T06:20:00+09:00
Location: Official text, relevant tables and technical notes. The timestamp is the source verification time recorded in the existing publication.
Supporting premise: US financial regulators sought comment on proposed revisions to interagency guidance for managi…
Supporting premise: The FDIC, Federal Reserve Board, NCUA and OCC published proposed revisions to interagency guida…
Supporting premise: Four regulators announced revised guidance and a separate statement on core service providers, …
Return to this passageStrengthen conclusions about actual operating change only when final guidance connects to subsequent institution and provider disclosures. This commentary does not recommend investment actions.
Supporting premise: US financial regulators sought comment on proposed revisions to interagency guidance for managi…
Supporting premise: The FDIC, Federal Reserve Board, NCUA and OCC published proposed revisions to interagency guida…
Supporting premise: Four regulators announced revised guidance and a separate statement on core service providers, …
Return to this passageWhich responsibilities and procedures change in the final guidance after consultation?
Return to this passageHow do supervisory explanations address concentration among core providers and incident response?
Return to this passageHow do final procedures for traditional community banks distinguish size and complexity?
Return to this passageDo institution disclosures show changes in technology-supplier management and operating controls?
Return to this passageUS financial regulators proposed interagency guidance tailored to the characteristics of third-party relationships. Actual operating changes are assessed only when final documents and subsequent institution and core-provider disclosures establish them.
Supporting premise: US financial regulators sought comment on proposed revisions to interagency guidance for managi…
Supporting premise: The FDIC, Federal Reserve Board, NCUA and OCC published proposed revisions to interagency guida…
Supporting premise: Four regulators announced revised guidance and a separate statement on core service providers, …
Return to this passage