All regulations & standards
United States · Regulation & standard

Interagency Third-Party Guidance scenario testing with simulations

What is Interagency Third-Party Guidance?

The 2023 interagency guidance from the Federal Reserve, FDIC and OCC sets expectations for managing third-party relationships across their life cycle, from due diligence and contracting to ongoing monitoring and termination.

iluminr simulations let teams rehearse the decisions Interagency Third-Party Guidance cares about against severe-but-plausible scenarios, and keep a record of who decided what, and when. Run them as Microsimulations, full-scale simulations, or facilitated by our team of experts.

Build a 12-month Interagency Third-Party Guidance programOpen in the catalogue

Simulations mapped to Interagency Third-Party Guidance

AI neural network visualization, illustrating the Breached: AI IP Leak MicrosimulationAI RiskBreached: AI IP LeakRespond to a sensitive data leak involving AI-generated content, focusing on incident assessments, situational awareness, and securing communication protocols.Lightning storm over a city, illustrating the Connectivity Down: Severe Weather MicrosimulationThird-Party & TechnologyConnectivity Down: Severe WeatherRespond to severe weather-induced operational disruptions, including widespread internet outages, by verifying role responsibilities and ensuring continuity in communications and operations.Data center servers in the dark, illustrating the Core Platform Outage: Rollback MicrosimulationThird-Party & TechnologyCore Platform Outage: RollbackA critical platform update turns into a live-fire incident as a scheduled patch unexpectedly brings down key systems. Participants must navigate real-time service degradation, mounting customer pressure, and rollback decisions under duress. This Microsimulation tests cross-functional coordination, incident escalation, and communication flow - providing vital validation of operational resilience, rollback protocols, and regulatory compliance readiness.Digitally distorted face, illustrating the Deepfake Threat: Cyber Attack MicrosimulationAI RiskDeepfake Threat: Cyber AttackYour organization grapples with an AI-driven cyber-attack, where advanced deepfake technology is being used to generate highly convincing fraudulent communications. This attack triggers a governance breakdown, posing severe risks to the organization’s reputation and operational integrity. --- [EngUS] Your organization grapples with an AI-driven cyber-attack, where advanced deepfake technology is being used to generate highly convincing fraudulent communications. This attack triggers a governance breakdown, posing severe risks to the organization’s reputation and operational integrity.A broken chain, illustrating the Exit Plan: Vendor Insolvency MicrosimulationThird-Party & TechnologyExit Plan: Vendor InsolvencyA critical third-party vendor has filed for insolvency, causing both operational and data losses. Can your team execute the exit plan under pressure?AI neural network visualization, illustrating the Poisoned: Data Corruption MicrosimulationAI RiskPoisoned: Data CorruptionAssess and mitigate the impact of a sophisticated data poisoning cyber-attack that has corrupted critical operational data and disrupted decision-making processes.Ripples spreading across dark water, illustrating the Ripple Effect: Fourth-Party Fallout MicrosimulationThird-Party & TechnologyRipple Effect: Fourth-Party FalloutA critical system failure has occurred in your supply chain, creating significant operational impacts. Your third-party vendor experienced a service outage caused by a vulnerability introduced through an undetected AI-driven update in their supplier's systems. This failure has cascaded through your supplier's network, resulting in widespread service disruptions that are now affecting your business operations and customers.Shipping containers at a port, illustrating the Trapped: Vendor Modern Slavery MicrosimulationThird-Party & TechnologyTrapped: Vendor Modern SlaveryNavigate the ethical, legal, and operational challenges posed by a tech supplier embroiled in a modern slavery scandal, focusing on incident assessment and communication strategies.Data center servers in the dark, illustrating the Vendor Outage: System Down MicrosimulationThird-Party & TechnologyVendor Outage: System DownRespond to a critical vendor cyber-attack that has disrupted essential services, focusing on business impact assessment, data review, and immediate contingency actions.AI neural network visualization, illustrating the Fairplay: AI Bias in a Critical Service MicrosimulationAI RiskFairplay: AI Bias in a Critical ServiceAddress the fallout from AI-driven bias in critical business services, focusing on managing stakeholder concerns and reassessing operational fairness.Emergency lights at night, illustrating the Digital Deceit: Workplace Threat MicrosimulationAI RiskDigital Deceit: Workplace ThreatA deepfake video falsely depicting the CEO making controversial remarks has been traced back to an employee's corporate laptop credentials. The video is circulating online, causing backlash, and prompting an urgent response to mitigate reputational damage and address the misuse of AI. --- Formerly titled 'Deepfake: Workplace Safety'AI neural network visualization, illustrating the Trained: AI Bias in Hiring MicrosimulationAI RiskTrained: AI Bias in HiringA tech company gets shutdown over AI bias allegations, disrupting global recruitment processes.AI neural network visualization, illustrating the Agent Autonomous: Customer Service MicrosimulationAI RiskAgent Autonomous: Customer ServiceDeveloped to explore the adoption of Agentic AI as part of a severe but plausible threat impacting a Critical Operation.AI agent profile cards over a glowing network, illustrating the Agent Down MicrosimulationAI RiskAgent Down: AI Agent FailureA forward-thinking Microsimulation that explores the potential impacts and response priorities associated with agentic AI in critical services.AI neural network visualization, illustrating the AI Lies: Fact vs Fiction MicrosimulationAI RiskAI Lies: Fact vs FictionAI-generated misinformation about your organization spreads faster than you can verify it. Separate fact from fiction, decide what to say publicly, and protect trust while the story is still moving.Glowing AI brain and doorway in a purple digital space, illustrating the Model Switch: AI Service Outage MicrosimulationAI RiskModel Switch: AI Service OutageAn issue affecting a foundational AI service triggers a wave of questions. Decide what matters, what doesn't and what to do next.

Mapping is indicative. Confirm scope against your own obligations.

Frequently asked questions

What is Interagency Third-Party Guidance?

The 2023 interagency guidance from the Federal Reserve, FDIC and OCC sets expectations for managing third-party relationships across their life cycle, from due diligence and contracting to ongoing monitoring and termination.

How do simulations help with Interagency Third-Party Guidance?

Simulations let teams rehearse the decisions Interagency Third-Party Guidance cares about against severe-but-plausible scenarios. iluminr keeps a record of who decided what, and when, which you can use as evidence of testing.

Which iluminr simulations map to Interagency Third-Party Guidance?

Simulations mapped to Interagency Third-Party Guidance include Breached: AI IP Leak, Connectivity Down: Severe Weather, Core Platform Outage: Rollback, Deepfake Threat: Cyber Attack, Exit Plan: Vendor Insolvency and Poisoned: Data Corruption, among others.

Who should take part?

These simulations are most often run with Technology & Security, Risk, Executive & Board and Data & AI.

Can I build a 12-month Interagency Third-Party Guidance testing program?

Yes. The iluminr program builder suggests a 12-month plan of simulations for Interagency Third-Party Guidance. You can add or remove scenarios and export the plan as a PDF for your board.

Can we customize these simulations?

Yes. Run any template as is, tailor the roles, plans, critical services and injects to your organization, or build your own from scratch with the iluminr builder.

Is this mapping legal or compliance advice?

No. The mapping between simulations and Interagency Third-Party Guidance is indicative. Confirm scope against your own obligations.

More in United States