On October 30, 2013 the Office of the Comptroller of the Currency (OCC) published a bulletin to the CEOs and CROs of all national banks stressing the need for an enterprise risk management approach to vendor management. In the bulletin, entitled, OCC: Third-Party Relationships: Risk Management Guidance, the office recognizes, “integrating the bank’s third-party risk management process with its enterprise risk management framework enables continuous oversight and accountability.”
How does the OCC