Answer:
No, of course not. Although the Guidance is relevant to all banking organizations, not all third-party relationships present the same level or type of risk and therefore they do not all require the same level of oversight or risk management. Each banking organization is responsible for analyzing the risks associated with each third-party relationship and for calibrating its risk management processes so they are commensurate with the organization’s size, complexity, and risk profile and with the nature of its third-party relationships.
-------------------------
Learn more about John Burnett’s, Managing the Risk of Third-Party Relationships webinar.