
OCC won’t offer further guidance on ‘fourth-party’ risk
The onus is on banks to vet subcontractors during contract negotiations, the regulator says

The US Office of the Comptroller of the Currency has no plans to offer further guidance on the way firms manage the risk posed by their vendors’ vendors, despite concerns around so-called fourth-party risk.
Beth Dugan, the deputy comptroller for operational risk at the OCC, says a firm’s protection from its supplier’s subcontractors boils down to the contract it has with the vendor – a task best left to the bank itself, not regulators.
“These are contractual relationships that the OCC doesn’t
Only users who have a paid subscription or are part of a corporate subscription are able to print or copy content.
To access these options, along with all other subscription benefits, please contact info@risk.net or view our subscription options here: http://subscriptions.risk.net/subscribe
You are currently unable to print this content. Please contact info@risk.net to find out more.
You are currently unable to copy this content. Please contact info@risk.net to find out more.
Copyright Infopro Digital Limited. All rights reserved.
As outlined in our terms and conditions, https://www.infopro-digital.com/terms-and-conditions/subscriptions/ (point 2.4), printing is limited to a single copy.
If you would like to purchase additional rights please email info@risk.net
Copyright Infopro Digital Limited. All rights reserved.
You may share this content using our article tools. As outlined in our terms and conditions, https://www.infopro-digital.com/terms-and-conditions/subscriptions/ (clause 2.4), an Authorised User may only make one copy of the materials for their own personal use. You must also comply with the restrictions in clause 2.5.
If you would like to purchase additional rights please email info@risk.net
More on Risk management
Evalueserve tames GenAI to boost client’s cyber underwriting
Firm’s insurance client adopts machine learning to interrogate risk posed by hackers
Wait in the Q: US banks hold back on tariff-related provisions
Lack of data on supply chain vulnerabilities creates challenges for early CECL adjustments
Rising systemic risk demands a new risk management paradigm
Reinsurers need insurance-linked securities to share burden of climate-related catastrophic risk
ECB removes need for governing council to approve CCP facility
New “automatic” facility will require safeguards that are “still being implemented”, bank says
Dodging a steamroller: how the basis trade survived the tariff tantrum
Higher margins, rising yields and stable repo funding helped avert another disruptive blow-up
BoE plans to link system-wide and individual stress tests
Meanwhile, ECB wants to broaden system-wide stress models to include central counterparties
Cyber insurance costs expected to rise as loss ratios worsen
Recent ransomware and tech failure events could feed through into higher premiums this year
The WWR in the tail: a Monte Carlo framework for CCR stress testing
A methodology to compute stressed exposures based on a Gaussian copula and mixture distributions is introduced