<img src="https://ws.zoominfo.com/pixel/pIUYSip8PKsGpxhxzC1V" width="1" height="1" style="display: none;">

Planning to Fail or Failing to Plan - Strategic Risk

author Michael Berman
1 min read
Dec 15, 2016

Vendor risk management is an ongoing process—one that begins with due diligence before a contract is signed and continues with monitoring throughout the length of the relationship. This blog series on the Top 10 risks will help you more effectively address how third-party vendor risk throughout every department in your financial institution.

#7 Strategic Risk

The future doesn’t always work out the way we think it will. You know it—and I know it.

Yet we work and struggle and try to prepare for it. We spend hours assessing industry trends and trying to figure out which way the winds will blow. We do everything thing we can to position our organizations for success, balancing short-term needs with long-term goals—but not everyone else is that careful.

Strategic risk is the possibility that a company doesn’t make decisions that support its long-term goals. Companies that aren’t managed well and make poor strategic decisions may provide sub-par products or services or even close shop. They can leave your institution in the lurch—failing to provide critical products and services.

The OCC says this can happen when:

  • risks aren’t properly assessed;
  • not enough thought and due diligence are put into new products, business lines or activities; or
  • when the company undertakes an action that’s not consistent with the company’s goals or doesn’t provide the expected return on investment.

Assessing Strategic Risk

The key areas to look at when assessing strategic risk include:

  • Know the age of a company and the size of its market.
  • Understand who runs the show including senior management, board of directors and relevant committees.
  • Operational controls and audits. Ensure operational controls are monitored and addressed through internal and external audits.
  • Vendor management. FIs need vendor management programs and so do vendors. This includes third-party oversight and monitoring, and identification and resolution of information security-related risks.
  • Business continuity. There should be protocols to mitigate or prevent business interruptions and then recovery promptly.
  • Outsourcing and offshoring. Know where operations and personnel and subcontractors are located.

Notice that transaction, operational, country and cybersecurity risks are all included when assessing strategic risk. That makes it essential that any method used to conduct a strategic risk assessment should leverage these overlaps to maximize efficiency.

 

Subscribe to the Nsight Blog

All Topics Risk & Compliance Product Insight Banks Lending Compliance Credit Unions Risk Management Fair Lending Nfairlending Cluster: Risk Management Compliance Lending Compliance Management Integrated Risk Blog Nrisk Regulatory Compliance Management News & Updates HMDA Risk Mortgage Lenders Ncomply Vendor Management Business Resiliency CRA Lending Compliance Blog Vendor CFPB Ncontinuity Third-Party Vendor Management Business Continuity Cybersecurity Fintech NVendor Strategic Planning Ncyber Ntransmittal Audits & Findings Company Culture OCC Regulatory Updates Audit Nverify Regulatory Compliance Exams FDIC Compliance Management Findings Nfindings NCUA Contract Management Employee Intranet Contract FRB Business Continuity Management FFIEC Findings Management Ncontracts manager Third-Party Vendors Vendor Risk Enterprise Risk Management ABA Bank Access Control Audit Findings Board Portal Call Report Due Diligence Efficiency Employee Engagement Exam findings FIEC Inc. 5000 Internal Audit Management Nboardportal Verify Wealth Management
Don’t Blow It at Exam Time - Pay Attention to the FFIEC Cybersecurity Assessment Tool
Risk & Compliance

Don’t Blow It at Exam Time - Pay Attention to the FFIEC Cybersecurity Assessment Tool

Nov 1, 2016 3 min read
How Puerto Rico's Vendor Management Went Awry with Whitefish Energy
Risk & Compliance

How Puerto Rico's Vendor Management Went Awry with Whitefish Energy

Nov 8, 2017 4 min read
Strategic Risks
Risk Management

Strategic Risks

Nov 13, 2018 1 min read