OCC
Bulletin 2023-17 — Third-Party Risk Management Guidance
FDIC
FIL-29-2024 — Third-Party Risk Management Joint Guidance
Community Bank Services
Financial Statement Audits (PCAOB-Registered
PCAOB-registered audit engagements built for community bank reporting requirements.
FDICIA Compliance Assessment
Internal control assessments aligned to FDICIA requirements.
TPRM — Vendor Management Program
Board-approved policy design and ongoing vendor monitoring program.
SOC Report Review Program
Ongoing tracking, reading, and documentation of vendor SOC reports.
SEC Filing Support (10-K, 10-Q, 8-K)
Filing support for publicly reporting community banks.
New Financial Institution Formation
Advisory support for de novo bank formation and governance readiness.
ICFR & SOX 404 Consulting
Identify, document, and test internal controls; remediate material weaknesses.
CECL Allowance Documentation
Qualitative and quantitative CECL support trusted by examiners and auditors.
IT & Cybersecurity Vendor Risk Assessment
Core banking vendor risk review — FIS, Fiserv, Jack Henry, fintech and BaaS partners.
Tax Services for Banks
Federal and state tax compliance specific to community financial institutions.
M&A and Governance Readiness
Pro forma financial support for merger, acquisition, or de novo formation.
Key Focus Areas
• OCC, FDIC, Fed — regulatory compliance and exam prep
• Core banking vendor TPRM (FIS, Fiserv, Jack Henry)
• Fintech and BaaS third-party risk management
• Material weakness remediation and ICFR advisory
• CECL model qualitative and quantitative documentation
• Board-approved TPRM policy design
• Examiner-ready TPRM documentation packages
Critical Vendor Categories We Assess
Technology & Operations Vendors
Core banking platforms — FIS, Fiserv, Jack Henry
Digital and online banking providers — Q2, Alkami, NCR
ATM and debit card processors
Item processing and check imaging vendors
Loan origination and servicing systems
Wire transfer and ACH processing providers
Compliance & Risk Vendors
BSA/AML software and transaction monitoring vendors
OFAC screening and sanctions compliance providers
Credit reporting agencies
Fraud detection and prevention service providers
Cybersecurity monitoring and SOC service providers
Why Credit Unions Choose R&C
✦ Independence — Our advice is never conflicted by product sales or ancillary commissions
✦ Integrity — We hold ourselves to the highest professional and ethical standards
✦ Accountability — When we commit to a deadline or deliverable, we deliver
✦ Service — Shaped by our veterans, service is not a value we adopted. It is who we are
✦ Expertise — We continuously invest in credentials, certifications, and industry knowledge
