# Regulators extend comments on vendor risk guidance

Published Nov 13, 2026. Last checked Nov 13, 2026. Last changed Nov 13, 2026.
Section: News
Who it is for: Federally insured credit unions. All sizes. Compliance officer, IT lead, CEO.

Four federal regulators, NCUA among them, gave one more month for comments on proposed guidance for managing vendors.

## The facts
- The FDIC, the Federal Reserve Board, NCUA and the OCC announced the extension on Nov 13, 2026.
- Comments are now due Dec 16, 2026. They were due Nov 16, 2026.
- The proposed guidance covers how an institution chooses, oversees and ends its vendor relationships. It names insured credit unions as covered.
- It says most institutions are likely to rate their core processor as a higher-risk relationship.
- The guidance is not binding. When it is final, NCUA plans to withdraw its existing vendor guidance.

## What it means for you
NCUA plans to replace the vendor guidance that credit unions use today. A credit union that wants a say has until Dec 16, 2026.

## Sources
- NCUA press release, primary source, Nov 13, 2026: https://ncua.gov/newsroom/press-release/2026/agencies-extend-comment-period-proposed-third-party-risk-management-guidance
- Federal Register, proposed guidance, primary source, Sep 15, 2026: https://www.govinfo.gov/content/pkg/FR-2026-09-15/pdf/2026-18859.pdf

General information, not financial, legal or regulatory advice. Not affiliated with the NCUA.

Page: https://creditunionindex.com/news/regulators-extend-comments-on-vendor-risk-guidance/