<img src="https://ws.zoominfo.com/pixel/pIUYSip8PKsGpxhxzC1V" width="1" height="1" style="display: none;">

4 Ways Compliance Can Protect Your Institution's Resources

author Ncontracts
3 min read
Apr 16, 2015

We’re launching an ongoing series about how you can turn compliance from a cost center to a cost saver. With the right tools, you can improve compliance efficiency and support your institution’s growth goals.

As a compliance officer, how many times have you heard that compliance is a drain on resources? That it doesn't make money? That it's not a revenue-building department? We've all been there and heard it.

However, we all know the truth: while compliance doesn't generate revenue, it can save resources!

Compliance can save the financial institution both time and money, and preserve the reputation if it's managed appropriately. The compliance department is an important part of the team.

The "spin doctors" may have the right idea by trying to manage the way a story is told in order to influence what people think about it. As Compliance Officers, we may need to "spin" the way the organization views the compliance department by contributing to the conversation. We need to change that old mindset from "compliance is a cost center" into "compliance is a cost saver."

We need to show our teams how having strong compliance policies, procedures, and controls can save resources. Here are four ways that strong compliance departments can protect your institution's resources:

  1. Improve the safety and soundness of the institution’s activities;
  2. Mitigate costly enforcement actions, which include civil, criminal and/or personal money penalties;
  3. Save time by avoiding long regulatory investigations and negotiations; and
  4. Preserve the institution’s reputation, which can be damaged by compliance enforcement actions.

With this series, we'll share real-world examples of situations in which a stronger compliance risk management could have turned the compliance department from a cost center to a cost saver. 

How Management Teams Can Use Regulatory Compliance Strategies to Mitigate Civil Money Penalties

Last October, the FDIC levied substantial civil money penalties (CMP) against an individual affiliated with a financial institution, as well as the institution itself.

These CMPs against the individual totaled nearly $730,000, $105,000 of which was unappealable. The reason cited was “unsafe and unsound banking practices, both individually and as an institution-affiliated party of the bank,” which were associated with underwriting.

One of the key compliance issues highlighted in this case is third-party risk. As part of a strong compliance program, financial institutions have a responsibility to perform due diligence on any third-party that is associated and working with the financial institution. It is imperative that third-parties are proven to be trustworthy. If not, the institution itself can be held responsible for any misconduct.

As a Compliance Officer, do you have a third-party risk management policy (vendor management)? Have you recently reviewed it? At a minimum, does your policy cover:

  • Due diligence of the third-party based on risk and complexity of the relationship;
  • Ongoing and consistent monitoring of their activities and performance throughout the lifecycle of the relationship;
  • Documentation and reporting expectations; and
  • Specific responsibilities for compliance with federal and state regulations, and your financial institutions policies and procedures? 

This FDIC example is just one CMP that has been leveraged against financial institutions in recent months for lack of oversight in the third-party management process. 

Third-Party Risk Management Best Practices

The CFPB, OCC and Fannie Mae have issued guidance to help Compliance Officers and financial institutions to aid the creation and implementation of third-party risk management programs, and the management of these types of relationships. 

Compliance Officers play a key role in bringing this type of guidance to your management teams, to help them create processes that mitigate risk.

Here are some quick third-party risk management best practices to help turn compliance from a cost center to a cost-saver:

  • Conduct a review of critical vendors to look for gaps or red flags
  • Review the Third-Party Risk/Vendor Management Policy to see if it meets the regulators’ expectations
  • Review Contracts and/or Service Level Agreements; looking for red flags or gaps in compliance requirements
  • Include third-party testing in your compliance testing schedule

Source: OCC

TRUPOINT Viewpoint: Consider your compliance team as your resource protection department. It can save time, protect your institution's reputation and minimize risk. 

Over the past few years, compliance costs have risen dramatically – and are projected to continue to increase. It’s essential for financial institutions to make sure that they’re spending their compliance budgets as wisely as possible. You can’t afford to spend more than necessary – but you really can’t afford to spend less. At Ncontracts, we keep our clients' growth plans and profitability in mind.

Related: What Is A Compliance Management System And Why Your FI Needs One

 


 

Subscribe to the Nsight Blog

All Topics Risk & Compliance Product Insight Banks Lending Compliance Credit Unions Risk Management Fair Lending Nfairlending Cluster: Risk Management Compliance Lending Compliance Management Integrated Risk Blog Regulatory Compliance Management Nrisk News & Updates HMDA Risk Mortgage Lenders Vendor Management Ncomply CRA Business Resiliency Lending Compliance Blog Vendor CFPB Ncontinuity Business Continuity Third-Party Vendor Management Cybersecurity Fintech NVendor Strategic Planning Ncyber Regulatory Updates Ntransmittal Audits & Findings OCC Regulatory Compliance Company Culture Audit Nverify Compliance Management Exams FDIC Nfindings Findings NCUA Contract Management Employee Intranet Business Continuity Management Contract FRB Findings Management Enterprise Risk Management FFIEC Ncontracts manager Third-Party Vendors Vendor Risk Vendor Risk Management Wealth Management 1071 ABA Bank Access Control Artificial Intelligence Audit Findings Board Portal Call Report Compliance Risk Cybersecurity Assessment Digital Tansformation Due Diligence Efficiency Employee Engagement Exam findings FIEC Governance and Risk Management Inc. 5000 Internal Audit Management Nboardportal Verify integrated risk management
10 Questions for Third-Party Compliance
Fair Lending

10 Questions for Third-Party Compliance

Mar 19, 2013 4 min read
Do Small Institutions Need Risk Management?
Risk Management

Do Small Institutions Need Risk Management?

May 2, 2019 3 min read
Is Your Institution Prepared for These Emerging Risks?
Risk Management

Is Your Institution Prepared for These Emerging Risks?

Aug 26, 2019 2 min read