การจัดซื้อจัดจ้างด้านบริการทางการเงินสำหรับธนาคารและบริษัทประกันภัย พร้อมทางเลือกที่มีการกำหนดราคาไว้ในแผนการออก

แหล่งข้อมูล

1. [1] OCC, Federal Reserve and FDIC, Interagency Guidance on Third-Party Relationships: Risk Management, 88 FR 37920 (June 9, 2023)Critical activities; contingency plans for moving an activity to another third party; potential alternate third parties, the time frame to transition and the costs and fees at termination; contract terms for an orderly transition
2. [2] OCC Bulletin 2023-17 (June 6, 2023) and Federal Reserve SR 23-4The guidance as issued, still in force on October 6, 2026
3. [3] OCC, Federal Reserve, FDIC and NCUA, Proposed Third-Party Risk Management Guidance, 91 FR 58536 (September 15, 2026)Would rescind and replace the 2023 guidance; comments due November 16, 2026; alternative back-up providers that can take over easily
4. [4] Federal Reserve Board, joint press release (September 11, 2026)The agencies plan to rescind the existing guidance and replace it once the proposal is final
5. [5] Federal Reserve, FDIC and OCC, Joint Statement on Community Banks' Engagement with Core Service Providers (September 11, 2026)Contract terms that obstruct comparing or leaving a core provider, including undefined deconversion fees, weighed in supervision of core providers
6. [6] Federal Reserve, SR 26-7 (October 5, 2026)The joint statement sent to the Reserve Banks
7. [7] Bank Service Company Act, 12 U.S.C. 1867(c) (Cornell LII)A bank notifies its federal regulator of a service relationship within 30 days of the contract
8. [8] Computer-security incident notification, 12 CFR 53.3 and 53.4 (Cornell LII)A bank service provider notifies the bank as soon as possible of an incident disrupting covered services for four or more hours; the bank notifies its regulator within 36 hours
9. [9] Regulation (EU) 2022/2554 (DORA), Articles 28, 30 and 64 (EUR-Lex)Tested exit plans and alternative solutions identified; a register of information; a mandatory adequate transition period in contracts; applies from January 17, 2025
10. [10] Commission Implementing Regulation (EU) 2024/2956, register of information template B_07.01 (EUR-Lex)Field B_07.01.0110: are alternative ICT third-party service providers identified; field B_07.01.0080: existence of an exit plan
11. [11] European Banking Authority, final Guidelines on the management of third-party risk (September 18, 2026)Exit strategies across ICT and non-ICT arrangements supporting critical or important functions; two-year transitional period
12. [12] NAIC, Insurance Data Security Model Law (Model 668), Section 4F (2017)An insurer exercises due diligence in selecting a third-party service provider
13. [13] NAIC, Insurance Data Security Model Law, state page (Summer 2026)The model is enacted state by state
14. [14] New York Department of Financial Services, 23 NYCRR 500.11 (Cornell LII)Policies for third-party service providers: risk assessment, minimum practices, due diligence and periodic assessment
15. [15] SEC, Regulation S-P final rule, 89 FR 47688 (June 3, 2024)Service providers report a breach of a customer information system within 72 hours; 18- and 24-month compliance periods
16. [16] SEC, Withdrawal of Proposed Regulatory Actions, 90 FR 25531 (June 17, 2025)The 2022 proposal on outsourcing by investment advisers withdrawn
17. [17] FDIC, Quarterly Banking Profile, Second Quarter 2026 (August 25, 2026)"All other" noninterest expense up 14.7% and salaries up 6.6% in a year; what "all other" includes; an efficiency ratio of 55.38
18. [18] FDIC, QBP time-series spreadsheets, second quarter 2026Second-quarter noninterest expense by line, 2019 and 2026
19. [19] Independent Community Bankers of America, comment letter to the OCC, Docket OCC-2025-0537 (January 27, 2026)About 160 vendor relationships at the average community bank, roughly 20% of them critical (ICBA survey data)
20. [20] American Bankers Association, comment letter to the OCC, Docket OCC-2025-0537 (January 27, 2026)Banks report giving a core provider a year or more of notice, although some contracts say 180 days
21. [21] American Bankers Association, 2024 Core Platforms Survey (February 2025)Termination or deconversion fees among the two most problematic terms for 30%; 69% likely to stay at renewal, 19% to convert (780 responses, 7.1% response rate)
22. [22] ECB Banking Supervision, Supervision Newsletter, "Outsourcing trends in the banking sector" (February 19, 2025)82% of critical outsourced functions difficult or impossible to substitute, 95% of those hard to reintegrate (euro-area significant banks, end-2023 data)
23. [23] A-Team Insight on the CeFPro survey commissioned by Escode, an escrow vendor (August 27, 2024)20% of financial professionals reported adequate stressed exit plans for critical ICT vendor agreements (107 respondents)
24. [24] Ncontracts, 2026 State of Third-Party Risk Management survey release (March 12, 2026)63% of TPRM programs run with one or two dedicated staff (173 respondents; vendor research)
25. [25] USPS Postal Explorer, Notice 123 price list (effective October 4, 2026)First-Class Mail automation 5-digit letter: $0.621
26. [26] USPS Postal Explorer, Notice 123 archive (effective January 26, 2020)First-Class Mail automation 5-digit letter: $0.389
27. [27] US Bureau of Labor Statistics, PPI for printing, PCU32311-32311-121.9 in January 2020, 186.072 in August 2026 (preliminary)
28. [28] US Bureau of Labor Statistics, CPI-U, CUUR0000SA0257.971 in January 2020, 334.980 in August 2026
29. [29] Regulation Z, 12 CFR 1026.5(b)(2)(ii) and 1026.9(c)(2) (Cornell LII)Card statements mailed at least 21 days before the payment due date; 45 days’ notice of a significant change in terms
30. [30] Regulation E, 12 CFR 1005.9(b) (Cornell LII)A periodic statement for each monthly cycle with an electronic transfer, at least quarterly otherwise
31. [31] IRS, General Instructions for Certain Information Returns (2025)Forms 1099 furnished by February 2, 2026; 1099-B and consolidated statements by February 17, 2026
32. [32] SEC Rule 30e-1, 17 CFR 270.30e-1 (Cornell LII)Fund shareholder reports transmitted within 60 days of the period’s close
33. [33] New York Insurance Law § 3425 (NY Senate)Nonrenewal notice 45 to 60 days before the end of the policy period
34. [34] California Insurance Code § 678 (California Legislative Information)Nonrenewal notice at least 75 days before a homeowners policy expires
35. [35] Texas Insurance Code § 551.105 (Texas Legislature)An insurer must renew unless it mailed notice of nonrenewal at least 60 days before expiration
36. [36] Pennsylvania Treasury, RFP 23-001, Print to Mail Continuity of Operations (February 1, 2024)A standby print-to-mail provider: recovery site at least 50 miles from headquarters, operating within 24 hours, disaster tests twice a year