Agencies Seek Comment on Proposed Third-Party Risk Management Guidance and Issue Statement on Community Bank Engagement with Core Service Providers — 2026-09-11

Today the Federal Deposit Insurance Corporation, the Federal Reserve Board, the National Credit Union Administration, and the Office of the Comptroller of the Currency (collectively, the agencies) requested comment on proposed guidance to assist financial institutions with managing risks associated with third-party relationships. The proposed guidance reflects the agencies’ supervisory experience and lessons learned from examining financial institutions’ third-party risk management practices. It is intended to assist banks and credit unions to better align and tailor their third-party risk management practices to the risks of individual third-party relationships. The proposed guidance focuses on a principles-based approach and, as with all supervisory guidance, is non-binding. When finalized, the federal bank regulatory agencies plan to rescind existing third-party risk management guidance and replace it with the finalized guidance to promote consistency and prudent innovation in the banking industry.