Riskonnect+美国银行倒闭促使重新评估第三方风险-英-20页_15mb

U.S. Bank Failures Prompt Reassessment of Third-Party Risks

According to a joint survey by Compliance Week and Riskonnect, nearly half (45%) of 118 respondents in the U.S. banking crisis reassessed their third-party risk management (TPRM) procedures after the failures of three mid-sized banks.

Key findings include:

1. Broader Impact:

   • 63% reported that existing systems failed to detect critical third-party risks.
   • Third-party payment issues led to payroll difficulties for 63% of organizations.

2. Risk Concerns:

   • Most respondents prioritize third-party financial stability (26%), risk identification/mgmt capabilities (29%), and risk rating (21%) followed by critical dependency identification (21%).

3. Confidence in Monitoring:

   • Only 12% were highly confident in detecting red flags, plunging confidence to 9% for "nth-parties".

4. Response Measures:

   • 39% enhanced vendor due diligence; 35% updated policies; 11% modified contracts; 11% reduced onboarding.

5. Critical Dependencies:

   • Only 49% considered under 25% of third parties critical, with 61% of firms having fewer than 5,000 employees.

Implications:

• The crisis highlighted gaps in risk oversight, particularly in legacy monitoring systems and extended vendor networks.
• Proactive reassessment and enhanced risk correlation technologies are deemed necessary for improved resilience.

Quote Insight:
“You have to always be learning. What gets tracked now wasn’t tracked before," noted Chris Joles, emphasizing continuous process refinement.

This summary derives from Compliance Week’s data, presenting key percentages, concerns, confidence gaps, and response measures observed among TPRM professionals affected by the crisis.