Third-party risk management is important for any company hiring vendors or sub-contractors. For banks, the OCC expects the bank to have risk management processes that are commensurate with the level of risk and complexity of its third-party relationships and its organizational structures. OCC 2013-29 provides guidance to banks for assessing and managing risks associated with third-party relationships.