Meeting OCC Third-Party Risk Requirements [2024 Edition] | UpGuard

This report summarizes the OCC Bulletin 2013-29 third-party risk management (TPRM) expectations for U.S. national banks and federal savings associations, organized into three pillars—Documentation & Reporting, Oversight & Accountability, and Independent Reviews—and covering lifecycle stages such as planning, due diligence, contract management, continuous monitoring, termination, and independent review; it also outlines how UpGuard’s risk assessments, questionnaire builder, attack surface monitoring, vendor tiering, and contract/Trust Page features can help financial institutions meet these TPRM requirements.