Treasury Department Docket OCC-2026-0793 Notice

2026-18859: Proposed Third-Party Risk Management Guidance

Comment Period Open 19 days left

Comments due

Comments are filed with the agency on Regulations.gov — once the window closes, it stops accepting public input.

Get alerted when the next rule lands

New rules open for comment on their own schedule. Pick how you want to hear about them — we email you when one appears.

Alert me on new Treasury Department rules or alert me on a subject

Publishing to members? Embed a live rule tracker on your own site — the proposed rules in your area and the comment deadlines closing on them, updating themselves. Free, one line of HTML.

Create a free account & build one →

Comment window open — make it count.

One comment is a voice; a thousand is a movement. Mobilize your list to file personalized comments before the deadline with One Click Politics advocacy software.

See advocacy software → Book a call

Summary

The OCC, Board, FDIC, and NCUA (collectively, the agencies) invite comments on this proposed third-party risk management guidance. The proposed guidance would reflect the agencies' supervisory experience and lessons learned through examining banking organizations' third-party risk management practices. In particular, the proposed guidance would discuss the potential benefits that may accrue when a banking organization aligns its third-party risk management practices in relation to the reasonably assessed risk levels specific to each of its third-party relationships. This approach may assist banking organizations in the prioritization of third-party risk management based on material financial risks, compliance with laws and regulations, and resource allocation. The proposed guidance also would help banking organizations consider potential strategies for tailoring their third-party risk management practices according to the banking organization's size, complexity, and risk profile, as well as the nature of its third-party relationships. The agencies plan to rescind and replace existing guidance on third-party risk management to promote consistency and innovation in the banking industry.

The agency’s own summary, as published.

Don't miss the comment window

One Click Politics alerts you on every deadline, hearing, and rule change.

See all rules with comments due soon →