What's Happening?
The Federal Deposit Insurance Corporation (FDIC) is moving to establish an independent standards-setting organization, tentatively named the Banking Innovation Standards Development Organization (BISDO). This new entity aims to certify whether bank service
providers and vendors adhere to federal regulatory guidelines for third-party risk management. The FDIC is collaborating with various banking and financial technology trade groups, including the American Bankers Association (ABA), the Independent Community Bankers of America (ICBA), and the Bank Policy Institute, among others. The FDIC is expected to provide initial funding for BISDO. A draft term sheet circulated among stakeholders outlines that BISDO would develop and publish standards, offer a voluntary certification program for third-party service providers, and maintain a public registry of certified providers. This initiative seeks to streamline due diligence for banks, particularly community banks, and enhance regulatory oversight of third-party partnerships.
Why It's Important?
This proposal is significant for the U.S. banking sector, especially for community banks, as it aims to simplify and standardize the complex landscape of third-party risk management. Currently, banks face considerable challenges in assessing the compliance and security of their numerous vendors and service providers. BISDO's certification program could reduce the operational burden and costs associated with due diligence, allowing community banks with limited resources to allocate capital towards technology investments and expanded lending capacity. For fintech companies and other service providers, certification could become a de facto requirement for partnering with banks, potentially creating a more transparent and competitive market. The initiative also seeks to provide federal banking agencies with greater visibility into banks' third-party relationships, potentially preventing incidents like the 2024 Synapse failure, which highlighted significant recordkeeping breakdowns and customer fund inaccessibility.
What's Next?
The FDIC's proposal for BISDO is currently in its developmental stages, with a draft term sheet circulating among stakeholders. The terms are subject to change, and banks and service providers are advised to monitor these developments closely. While the Office of the Comptroller of the Currency (OCC) is reportedly considering joining the FDIC's efforts, the Federal Reserve's participation remains uncertain. The success and impact of BISDO will depend on several factors, including its funding model post-implementation, its ability to adapt to rapidly evolving financial technologies, and whether its certification becomes a widely accepted industry standard. The FDIC and other federal banking regulators are working diligently to reduce burdens on community banks, suggesting that further updates and progress on BISDO can be expected in the coming months.
Beyond the Headlines
The creation of BISDO reflects a growing recognition within the U.S. financial regulatory landscape of the increasing reliance on third-party technology and service providers. This initiative addresses the systemic risks that can arise from inadequate oversight of these partnerships, as demonstrated by recent financial disruptions. Beyond operational efficiencies, BISDO could foster a more secure and resilient financial ecosystem by promoting consistent and robust risk management standards across the industry. The voluntary nature of the certification raises questions about its eventual adoption rate and whether market pressure will effectively make it a mandatory requirement. This move also highlights the ongoing challenge for regulators to keep pace with technological advancements while ensuring the stability and security of the financial system, potentially setting a new precedent for how regulatory bodies collaborate with industry to address emerging risks.
