<img src="https://ws.zoominfo.com/pixel/pIUYSip8PKsGpxhxzC1V" width="1" height="1" style="display: none;">

Assess Vendor Reputation Risk - Before You Have to Rebuild Yours

author Michael Berman
2 min read
Dec 13, 2016

Vendor risk management is an ongoing process—one that begins with due diligence before a contract is signed and continues with monitoring throughout the length of the relationship. This blog series on the Top 10 risks will help you more effectively address how third-party vendor risk throughout every department in your financial institution.

#8 - Reputation Risk

Ben Franklin once wrote that “Glass, china and reputation are easily cracked, and never well mended.”

It’s a lesson that many financial institutions have learned the hard way as they’ve entrusted their reputation to third-party service providers whose mistakes have caused material damage. Whether it’s lawsuits, outages, fraud or data breaches, consumers notice bad headlines and take their business elsewhere.

Consider the headache $18.4 billion-asset First National Bank of Omaha faced earlier this year when it came out that its credit card add-on vendor charged customers for credit monitoring services they didn’t receive.

Neither customers nor regulators differentiated between the bank and its vendor—blaming the bank for ripping off customers. Not only did the bank pay millions in penalties to the CFPB and OCC, the bad publicity of newspaper headlines costs the bank in customer goodwill. Who knows when the bank will regain this loss of public trust?

Vendor mistakes like this can hurt a financial institution’s reputation, according to the FDIC and OCC, when they cause:

  • dissatisfied customers/poor service
  • frequent or prolonged service disruptions
  • interactions not consistent with institution policies
  • inappropriate sales recommendations
  • security breaches resulting in the disclosure of customer information
  • violations of consumer law and regulation
  • negative publicity involving the third party

While there’s no guarantee that vendor actions won’t damage an institution’s reputation, thorough due diligence can help an institution gauge the risk a particular vendor poses and mitigate those risks. It just takes some digging. The good news is that almost all of those sources are publicly available and easy to find if you know where to look.

It also helps that that many of these reputation risks overlap with other common risks including operational risk, transaction risk, compliance risk, cyber risk and cloud risk. FIs that use a comprehensive approach to vendor management will be best able to leverage existing work in these areas to quickly, efficiently and thoroughly assess reputation risk.

 

Related: Vendor Risk Countdown: Top 10 Risks Third-Party Vendors Pose to Your Financial Institution

Subscribe to the Nsight Blog

All Topics Risk & Compliance Product Insight Banks Lending Compliance Credit Unions Risk Management Fair Lending Nfairlending Cluster: Risk Management Compliance Lending Compliance Management Integrated Risk Blog Regulatory Compliance Management Nrisk News & Updates HMDA Risk Vendor Management Mortgage Lenders Ncomply Business Resiliency CRA Lending Compliance Blog Vendor Third-Party Vendor Management CFPB Ncontinuity Business Continuity Cybersecurity Fintech NVendor Strategic Planning Regulatory Updates Ncyber Ntransmittal Audits & Findings Regulatory Compliance OCC Company Culture Audit Nverify Compliance Management Exams FDIC Nfindings Findings NCUA Contract Management Employee Intranet Business Continuity Management Contract Enterprise Risk Management FRB Findings Management FFIEC Ncontracts manager Third-Party Vendors Vendor Risk Artificial Intelligence Vendor Risk Management Wealth Management 1071 ABA Bank Access Control Audit Findings Board Portal Call Report Compliance Risk Cybersecurity Assessment Digital Tansformation Due Diligence Efficiency Employee Engagement Exam findings FIEC Governance and Risk Management Inc. 5000 Internal Audit Management Mortgage Lending Nboardportal Regulatory Brief Verify integrated risk management risk managment
Reputational Risk
Risk Management

Reputational Risk

Nov 12, 2018 1 min read
Should Vendor Management Report to Compliance or IT?
Risk & Compliance

Should Vendor Management Report to Compliance or IT?

Jul 18, 2018 3 min read
72% of Banks and Credit Unions Prioritize Compliance When Evaluating Fintechs, According to Ncontracts Survey
News & Updates

72% of Banks and Credit Unions Prioritize Compliance When Evaluating Fintechs, According to Ncontracts Survey

Sep 12, 2023 3 min read