Agencies Extend Comment Period for Third-Party Risk Management Guidance

The extension signals that regulators see enough complexity or industry concern in the proposal to warrant more input, though the absence of a stated deadline leaves the timeline unclear. For banks and their external service providers — a category that can include crypto and tokenization vendors — third-party risk guidance shapes how partnerships are documented, monitored and audited, so the comment window is a rare lever for shaping those expectations. Whether the extended period produces substantive industry feedback, and how the agencies then revise the interagency text, is the open question worth watching.