Interagency proposal to overhaul third-party risk guidance for banks
The OCC, Federal Reserve Board, FDIC and NCUA seek comment by Nov. 16, 2026 on new guidance that would replace existing third-party risk rules for banks and credit unions.
The Office of the Comptroller of the Currency, the Board of Governors of the Federal Reserve System, the Federal Deposit Insurance Corporation and the National Credit Union Administration issued a joint notice proposing new third-party risk management guidance. The agencies state they will rescind and replace existing guidance to promote consistency and innovation in the banking industry.
The proposed guidance would encourage banking organizations to align their third-party risk management practices with the reasonably assessed risk level of each relationship, allowing prioritization based on material financial risk, compliance with laws and regulations, and resource allocation. It also would permit tailoring of practices to an organization's size, complexity, risk profile, and the nature of its third-party relationships.
Comments must be received on or before November 16, 2026. The OCC docket is OCC-2026-0793 (RIN 1557-ZA18); the Board docket is OP-1881; the FDIC docket is ZRIN 3064-ZA58; and the NCUA docket is NCUA-2026-1684 (RIN 3133-ZA54). Submission methods include the Federal eRulemaking Portal, agency-specific email addresses, and mail or hand-delivery to the addresses listed in the notice.
The agencies note that all comments become part of the public record and may be posted without change. The agencies will review the comments before finalizing the guidance.
Further reading