Insights for banks & credit unions
Risk, Compliance and Technology Thought Leadership Updates and Insights
The red flags in vendor due diligence are findings in a third party's file that question its ability to perform the activity safely. This could include exceptions on relied-on controls, a carved-out subservice orga...
Control mapping connects each statement in a bank's policies to the regulatory requirement it implements, the control that enforces it, the person who owns that control, the test that checks it and the evidence the...
An AI governance checklist for a bank or credit union should include a map of each AI use to the guidance that governs it and six governance steps (inventory, risk rating, pre-use testing, human review, ongoing mon...
Vendor risk tiering at banks and credit unions works by scoring each third-party relationship on inherent risk before controls, testing whether it supports a critical activity, and assigning a tier that sets due di...
In the point solutions vs platform decision, a bank or credit union compliance team needs a connected platform once examiners expect one obligation traced from regulatory change through policy, control, testing and...
Banks and credit unions use a vendor onboarding checklist by fixing the business owner, intended activity, criticality call and approver before the vendor is contacted, then working through planning, due diligence ...