News · News
Regulators extend comments on vendor risk guidance
Published Nov 13, 2026 · Last checked Nov 13, 2026 · Last changed Nov 13, 2026Four federal regulators, NCUA among them, gave one more month for comments on proposed guidance for managing vendors.
- For
- Federally insured credit unions. All sizes. Compliance officer, IT lead, CEO.
The facts
- The FDIC, the Federal Reserve Board, NCUA and the OCC announced the extension on Nov 13, 2026.
- Comments are now due Dec 16, 2026. They were due Nov 16, 2026.
- The proposed guidance covers how an institution chooses, oversees and ends its vendor relationships. It names insured credit unions as covered.
- It says most institutions are likely to rate their core processor as a higher-risk relationship.
- The guidance is not binding. When it is final, NCUA plans to withdraw its existing vendor guidance.
What it means for you
NCUA plans to replace the vendor guidance that credit unions use today. A credit union that wants a say has until Dec 16, 2026.
Sources
- NCUA press release, primary source, Nov 13, 2026.
- Federal Register, proposed guidance, primary source, Sep 15, 2026.