Bank Regulators Extend Third-Party Risk Guidance Comment Deadline to December 16
Four federal financial regulators extended the comment period for proposed, nonbinding third-party risk management guidance to December 16, 2026. The proposal may shape how banks and credit unions oversee contractors and service providers, but it announces no solicitation, contract award, or mandatory contractor compliance deadline.
Key Signals
- Four regulators extended the third-party risk guidance comment deadline to December 16, 2026
- Nonbinding proposal could influence bank and credit union oversight of contractors and service providers
- Federal banking agencies plan to replace existing third-party risk guidance when the proposal is finalized
- NCUA plans to rescind its existing guidance and review related guidance for updates
- No solicitation, contract award, award value, or mandatory contractor compliance date was announced
The Federal Deposit Insurance Corporation (FDIC), Federal Reserve Board, National Credit Union Administration (NCUA), and Office of the Comptroller of the Currency (OCC) extended the comment period for proposed guidance on managing risks associated with third-party relationships. Comments that were originally due November 16, 2026, are now due December 16, 2026. The agencies announced the extension on November 13, giving financial institutions and their service providers additional time to review the proposal and decide whether to submit feedback. The extension changes the opportunity to comment; it does not announce a procurement action or award.
Agencies
- Federal Deposit Insurance Corporation
- Federal Reserve Board
- National Credit Union Administration
- Office of the Comptroller of the Currency
Locations
- Washington
- Alexandria, Virginia