December 3, 2021

Volume XI, Number 337

Advertisement
Advertisement

December 03, 2021

Subscribe to Latest Legal News and Analysis

December 02, 2021

Subscribe to Latest Legal News and Analysis

December 01, 2021

Subscribe to Latest Legal News and Analysis

CFPB Updates Supervision and Examination Manual, Adds IT Examination

The CFPB updated its Supervision and Examination Manual by adding a new section titled Compliance Management Review – Information Technology.  The new examination procedures are meant to assist CFPB examiners when assessing an entity’s information technology (IT) controls as part of a Compliance Management System (CMS) review.  Among other things, the new exam procedures outline the following five modules:  (i) Board and Management Oversight; (ii) Compliance Program; (iii) Service Provider Oversight; (iv) Violations of Law and Consumer Harm; and (v) Examiner Conclusions and Wrap-Up.  Each module focuses on the components of a compliance program and the IT function, including policies and procedures, training, monitoring and/or audit, and consumer complaint response.

Putting Into Practice:  Central to the new exam procedures is the CFPB’s focus on the IT controls of an institution’s service providers.  The new section notes that third-party arrangements may “expose institutions to risks when not managed properly” and that institutions “cannot outsource the responsibility for complying with Federal consumer financial laws or managing the risks associated with service provider relationships.”  The CFPB’s supervisory authority over service providers was granted under Title X of Dodd-Frank and then clarified in later guidance (See CFPB Compliance Bulletin and Policy Guidance 2016-02).  Third-party risk management has also been a recent focus of the Federal Reserve, FDIC, and OCC (we previously discussed this latest trend in earlier Consumer Finance & FinTech Blog posts herehere, and here).

Copyright © 2021, Sheppard Mullin Richter & Hampton LLP.National Law Review, Volume XI, Number 294
Advertisement
Advertisement
Advertisement
Advertisement
Advertisement
Advertisement

About this Author

Moorari Shah Bankruptcy Lawyer Sheppard Mullin Law Firm
Partner

Moorari Shah is a partner in the Finance and Bankruptcy Practice Group in the firm's Los Angeles and San Francisco offices. 

Areas of Practice

Moorari combines deep in-house and law firm experience to deliver practical, business-minded legal advice. He represents banks, fintechs, mortgage companies, auto lenders, and other nonbank institutions in transactional, licensing, regulatory compliance, and government enforcement matters covering mergers and acquisitions, consumer and commercial lending, equipment finance and leasing, and supervisory examinations,...

213-617-4171
A.J. S. Dhaliwal Bankruptcy Attorney Sheppard Mullin Washington DC
Associate

A.J. is an associate in the Finance and Bankruptcy Practice Group in the firm's Washington, D.C. office. 

A.J. has over a decade of experience helping banks, non-bank financial institutions, and other companies providing financial products and services in a wide range of matters including government enforcement actions, civil litigation, regulatory examinations, and internal investigations.

With a diversified regulatory, compliance, and enforcement background, A.J. counsels financial institutions in matters involving...

202-747-2323
Advertisement
Advertisement
Advertisement