[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-seo-241897-105":3,"detail-sidebar-cat-1-en-105":80,"doc-detail-241897-en":126},{"code":4,"msg":5,"data":6},0,"ok",{"site_id":7,"language":8,"slug":9,"title":10,"keywords":11,"description":12,"schema_data":13,"social_meta":73,"head_meta":75,"extra_data":77,"updated_unix":79},105,"en","first-bank-vendor-management-policy-policy-and-program-management-vendor-oversight","First Bank Vendor Management Policy - Policy and Program Management - Vendor oversight","","First Bank’s Vendor Management Policy establishes governance for oversight of third-party entities that provide support and/or product services. It defines the mission of the vendor management program, linking third-party use to strategic objectives while preserving the Board’s and management’s responsibility for safe, sound, and compliant operations. The policy assigns authority and responsibilities across the Board, Relationship Manager, Compliance Department, and Compliance Team, and requires end-to-end outsourcing control including due diligence, contract negotiation, monitoring and discontinuation, annual reviews, exception reporting, and independent Internal Audit assessments.",{"@graph":14,"@context":72},[15,34,55],{"@type":16,"itemListElement":17},"BreadcrumbList",[18,23,27,31],{"item":19,"name":20,"@type":21,"position":22},"https://docshare.wps.com","Home","ListItem",1,{"item":24,"name":25,"@type":21,"position":26},"https://docshare.wps.com/template/","Template",2,{"item":28,"name":29,"@type":21,"position":30},"https://docshare.wps.com/template/general/","General",3,{"item":32,"name":10,"@type":21,"position":33},"https://docshare.wps.com/template/first-bank-vendor-management-policy-policy-and-program-management-vendor-oversight/241897/",4,{"url":32,"name":10,"@type":35,"image":36,"author":41,"headline":10,"publisher":44,"fileFormat":47,"inLanguage":8,"description":12,"dateModified":48,"datePublished":49,"encodingFormat":47,"isAccessibleForFree":50,"interactionStatistic":51},"DigitalDocument",{"url":37,"@type":38,"width":39,"height":40},"https://docshare.wps.com/thumbnails/first-bank-vendor-management-policy-policy-and-program-management-vendor-oversight/241897.png","ImageObject",442,249,{"name":42,"@type":43},"Felix Montgomery","Person",{"url":19,"name":45,"@type":46},"DocShare","Organization","application/pdf","2026-09-21","2026-09-12",true,{"@type":52,"interactionType":53,"userInteractionCount":30},"InteractionCounter",{"@type":54},"ViewAction",{"@type":56,"mainEntity":57},"FAQPage",[58,64,68],{"name":59,"@type":60,"acceptedAnswer":61},"What is the purpose of First Bank’s vendor management program?","Question",{"text":62,"@type":63},"The program assists the Board of Directors and management in overseeing third-party relationships and enabling strategic objectives such as increasing revenues or reducing costs, without diminishing responsibility for safe, sound, and compliant operations.","Answer",{"name":65,"@type":60,"acceptedAnswer":66},"Who is responsible for completing vendor risk assessments and due diligence?",{"text":67,"@type":63},"The Relationship Manager is responsible for completing risk assessments, collecting and reviewing due diligence information, and evaluating controls over third-party relationships.",{"name":69,"@type":60,"acceptedAnswer":70},"How does the policy manage vendor relationships over time?",{"text":71,"@type":63},"It requires end-to-end governance: setting servicing requirements, selecting providers via due diligence, negotiating contracts for control and monitoring, monitoring and discontinuing relationships that fail standards or contractual terms, and conducting annual reviews for high-risk or critical vendors.","https://schema.org",{"og:url":32,"og:type":74,"og:title":10,"og:site_name":45,"og:description":12},"article",{"robots":76,"canonical":32},"index,follow",{"doc_id":78,"site_id":7},241897,1789182684,{"code":4,"msg":81,"data":82},"success",[83,88,93,98,103,108,113,118,123],{"id":84,"doc_module":22,"doc_module_name":25,"category_name":85,"show_sort_weight":86,"slug":87},11,"Presentations",90,"presentations",{"id":89,"doc_module":22,"doc_module_name":25,"category_name":90,"show_sort_weight":91,"slug":92},12,"Resumes",80,"resumes",{"id":94,"doc_module":22,"doc_module_name":25,"category_name":95,"show_sort_weight":96,"slug":97},14,"Invoices",70,"invoices",{"id":99,"doc_module":22,"doc_module_name":25,"category_name":100,"show_sort_weight":101,"slug":102},15,"Posters",60,"posters",{"id":104,"doc_module":22,"doc_module_name":25,"category_name":105,"show_sort_weight":106,"slug":107},16,"Social Media",50,"social-media",{"id":109,"doc_module":22,"doc_module_name":25,"category_name":110,"show_sort_weight":111,"slug":112},17,"Forms",40,"forms",{"id":114,"doc_module":22,"doc_module_name":25,"category_name":115,"show_sort_weight":116,"slug":117},18,"Letters",30,"letters",{"id":119,"doc_module":22,"doc_module_name":25,"category_name":120,"show_sort_weight":121,"slug":122},21,"Paper Templates",5,"papers-templates",{"id":124,"doc_module":22,"doc_module_name":25,"category_name":29,"show_sort_weight":4,"slug":125},158,"general-158",{"code":4,"msg":81,"data":127},{"doc_id":78,"user_id":128,"nickname":42,"user_avatar":129,"doc_module":22,"category_id":124,"category_name":29,"doc_title":10,"doc_description":12,"doc_content":130,"file_id":131,"file_url":132,"file_type":133,"file_size":134,"view_count":30,"is_deleted":4,"is_public":22,"is_downloadable":22,"audit_status":22,"page_count":89,"language":135,"language_code":8,"site_id":7,"html_lang":8,"table_of_contents":136,"faqs":137,"seo_title":138,"seo_description":12,"update_tm":79,"read_time":33},549768064778,"https://ap-avatar.wpscdn.com/davatar_6f874abed73319feea01a86fa6f0fab8","First Bank Vendor Management Policy  \n# Policy and Program Management\n\nThe Board of Directors and management recognize the need to establish and implement policies andprocedures with respect to the appropriate oversight of third-party entities who provide various supportand/or product services for First Bank.For purposes of this policy,a third-party relationship is a broadlydefined term to include any entity that has entered into a business arrangement with First Bank by contractor otherwise.  \nThe third-party relationship may be positioned directly or indirectly between First Bank and its customersor otherwise have unfettered access to First Bank customers.Consequently,the quality of that third party'sperformance is critical to First Bank's long-term success.  \n## Mission\n\nThe purpose of the vendor management program is to assist the Board of Directors and management.Theuse of third parties can assist First Bank in attaining strategic objectives by increasing revenues or reducingcosts.The use of a third party also commonly serves as a vehicle for First Bank to access greater expertiseor efficiency for a particular activity.The decision about whether to use a third party is considered by theBoard of Directors or management by taking into account the circumstances unique to the potentialrelationship.The use of third parties in no way diminishes the responsibility of the Board of Directors andmanagement to ensure that the third-party activity is conducted in a safe and sound manner and incompliance with applicable laws,regulations,and internal policies.  \nThe time and resources devoted to managing third party relationships is based on the risk the relationshippresents to First Bank.  \n## Authority&Responsibility\n\nThe Board of Directors and management are ultimately responsible for identifying,controlling and properlyoverseeing outsourced relationships to mitigate risk against First Bank.  \nSince each applicable business line provides valuable input into the third-party risk management process,theRelationship Manager is the responsible party for completing the risk assessments,collecting and reviewingdue diligence information,and evaluating the controls over the third-party relationships.  \nThe Compliance Department is responsible for maintaining the program and assisting the relationshipmanagers with new vendor contracts,initial due diligence,and ongoing monitoring.The Compliance Teamensures that ongoing vendor reviews are conducted timely and following procedures,and that risk ratingsare kept up to date as part of the review process.They are also responsible for reporting periodically to theBoard(or designated committee)on all third-party risk management activities.  \nApproved by Board Compliance Committee November 13,2025Approved by the Board of Directors November 18,2025  \nThe Board of Directors and management have developed and implemented this policy to consistently governthe outsourcing process for the entire organization.This policy addresses outsourced relationships from anend-to-end perspective including:  \n1.Establishing servicing requirements and strategies  \n2.Selecting a provider by conducting due diligence activities  \n3.Negotiating the contract to provide First Bank with the ability to control and monitor third partyactivities(e.g.,growth restrictions,underwriting guidelines,external audits,etc.)and costs.  \n4.Monitoring,changing,and discontinuing the outsourced relationship if it does not meet high qualitystandards or uphold contractual terms.  \n5.Conducting annual reviews of high risk or critical third-party's audit results,financials and vendorprovided documentation.  \n6.Reporting any exceptions to the Board of Directors to ensure exceptions are immediately addressedto evaluate the risk to First Bank.  \nAnnual independent reviews willbe performed by Internal Audit to assess the adequacy of the Bank's third-party risk management program.The results of these independent reviews will be reported to the Board ordes","cbCaioGcpb00faIW","https://ap.wps.com/l/cbCaioGcpb00faIW","pdf",3333318,"English","# Policy and Program Management\n## Mission\n## Authority & Responsibility\n## Board of Directors\n## Authority\n## Enforcement\n## Exceptions\n## Planning/Risk Management","[{\"question\":\"What is the purpose of First Bank’s vendor management program?\",\"answer\":\"The program assists the Board of Directors and management in overseeing third-party relationships and enabling strategic objectives such as increasing revenues or reducing costs, without diminishing responsibility for safe, sound, and compliant operations.\"},{\"question\":\"Who is responsible for completing vendor risk assessments and due diligence?\",\"answer\":\"The Relationship Manager is responsible for completing risk assessments, collecting and reviewing due diligence information, and evaluating controls over third-party relationships.\"},{\"question\":\"How does the policy manage vendor relationships over time?\",\"answer\":\"It requires end-to-end governance: setting servicing requirements, selecting providers via due diligence, negotiating contracts for control and monitoring, monitoring and discontinuing relationships that fail standards or contractual terms, and conducting annual reviews for high-risk or critical vendors.\"}]","First Bank Vendor Management Policy - Policy and Program Management - Vendor oversight | PDF"]