Prepare Now for Future Catastrophes
Natural disasters such as floods, earthquakes, tornados, and hurricanes can happen anywhere at any time, so it is important that banks are as prepared as possible for these events. How can you be as prepared as possible for catastrophes? By implementing a good, workable business continuity plan. A viable plan begins with a comprehensive approach to risk assessment, so the most probable disasters can be considered. Such planning often categorizes threats on a scale from high to low, according to both their probability of occurring and the impact each could have on the bank.
One of the first exercises in the business continuity planning process is performing a business impact analysis. By identifying critical business functions and resources and establishing time frames for recovery, the business continuity planning team can prioritize recovery efforts. The business impact analysis helps provide an unbiased look at what really matters when disasters happen.
Youâll also want to determine how much planning and preparing is the right amount for your bank. Incorporating basic principles of sound business continuity planning, such as identifying potential threats, assessing their potential impact, assigning priorities, and developing planned responses is a must.  We have tools to help with your preparation: check out our Business Continuity Plan Policy, Business Impact Analysis template and our recent webinar Developing Your Business Continuity Management Plan.
The agencies have also provided guidance on the matter which can further help the bank in both preparing and in response to such disasters. For instance, the OCC issued a bulletin suggesting banks consider waiving or reducing ATM fees, temporarily waiving late payment fees or early withdrawal penalties, restructuring debt obligations when appropriate (although generally not longer than 90 days), expediting lending decisions when possible, and originating or participating in sound reconstruction loans.
The FDIC issued similar guidance that highlighted the unique challenges created by natural disasters, including communication and power outages, destruction of facilities, and interruption in availability of certain branches and ATMs. History has shown us that banks should anticipate communications disruptions and difficulty of staff to reach a recovery area. Banks should consider establishing an alternative facility if a financial institution is damaged or destroyed, prepare for the need to operate only in cash, and recognize the bank’s potential to aid other local banks.
The focus of preparation should be the potential impacts rather than the sources of the threat and what type of disasters youâre potentially facing. A threat that presents a low probability of occurring and a low impact may not warrant much attention. However, every threat that poses a high adverse impact generally warrants further consideration, regardless of the probability its occurrence. Additionally, banks should regularly test disaster recovery and business continuity plans to ensure their continued effectiveness for responding to changing business and operational needs.
A disaster like the recent Hurricane Ian, although infrequent, serves as a reminder why banks should implement business continuity and disaster recovery plans and work to make creative solutions to address unforeseen difficulties quickly. It may be impossible to prevent or anticipate all disasters, but banks must prepare and practice for them.
NFIP Reauthorized Again?
Stop me if youâve heard this one before: the National Flood Insurance Program (NFIP) was recently reauthorized again. âAgain?â you ask. Wasnât it just reauthorized? And wasnât it just reauthorized right before that? And right before that? And right before that? If the NFIP was originally passed over 50 years ago, why does it seem to keep getting reauthorized so often? The technical reason is that the NFIP does not contain a single expiration provision, so the program must continually be reauthorized, and Congress puts an expiration date on each reauthorization.
If it seems like youâve heard about NFIP reauthorizations a lot recently, itâs because you have. In the past five years the NFIP has been reauthorized twenty-two times. On average thatâs about once every 2.75 months, or once about every 82 days. The last âlong-termâ NFIP reauthorization was in 2012 as part of the Biggert-Waters Flood Insurance Reform Act, but that authorization expired on September 30, 2017. Since 2017 the longest reauthorization was one year, authorized during Fall 2020 during the COVID-19 debacle, and the shortest reauthorization was four days, earlier this year in March 2022.
Much like the Federal Deposit Insurance Corporation (FDIC) advertises that no depositor has ever lost a penny of insured deposits since the FDIC was created in 1933, the Federal Emergency Management Agency (FEMA) also promotes that FEMA and Congress have never failed to honor the flood insurance contracts in place with NFIP policyholders. Even if the NFIP wasnât reauthorized in time and the program lapsed (which has happened more than once in the last five years), FEMA still has the authority to ensure the payment of valid claims. The effect of a lapse is that policies cannot be purchased or renewed during a lapse, but once reauthorization occurs, NFIP policies may once again be purchased or renewed. Industry sources estimate that upwards of 40,000 home mortgage loans per month could be affected by an NFIP lapse.
The NFIP was most recently scheduled to expire on September 30, 2022, but as earlier indicated, it was indeed reauthorized. Apologies for burying the lede, but the recently reauthorized NFIP now expires on December 16, 2022. Before the digital ink will dry on this article, the NFIP is already âabout to expire againâ in about 60 days which, as discussed, is nothing new for the National Flood Insurance Program.
Despite the continual reauthorization process, the NFIP remains the primary source of flood insurance coverage for residential properties. According to Congressional estimates, there are nearly 5 million NFIP flood insurance policies providing over $1.3 trillion in coverage in the United States.
This looks to be a continual source of headache going forward, but here at Compliance Alliance weâll continue working to send out daily e-mails, weekly newsletters, and monthly magazines keeping you informed about whatâs going on in the industry (such as the NFIP expiration/reauthorization rollercoaster), as well as answering your questions on the hotline as the need arises.
Changes Coming to Beneficial Ownership
Weâve been hearing for a while now that changes were coming to Beneficial Ownership. The process has started, but will not be effective immediately, and of the three new final rules to be issued, the third rule will be the one that has the most impact on financial institutions. The first of the final rules to change the beneficial ownership requirements has been published.
How did we get here?
Section 6403 of the Corporate Transparency Act (CTA), enacted as part of the National Defense Authorization Act for Fiscal Year 2021 (NDAA), requires three things of the Financial Crimes Enforcement Network (FinCEN): 1) establish a database for beneficial ownership information, 2) establish rules for access to disclosure of beneficial ownership information, and 3) revise the existing customer due diligence (CDD) requirements for financial institutions. The current CDD rule has, since 2018, required that financial institutions collect information from legal entity customers regarding the beneficial owners of the legal entity customer.
Where are we now?
Of FinCENâs three requirements in Section 6403 of the CTA, weâre on step one of three. In December 2021 FinCEN published a notice of proposed rulemaking (NPRM) related to establishing a database for beneficial ownership information. Just recently FinCEN published the final rule related to establishing a database for beneficial ownership information. At the heart of this final rule is the requirement for corporations, limited liability companies, and entities created by the filing of a document with the Secretary of Stateâs office to provide beneficial ownership information directly to FinCEN. As part of establishing a database for beneficial ownership information, this rule also describes what information is required to be filed, along with the dates by which action must be taken. This final rule is effective January 1, 2024.
Whatâs next?
Because this first final rule implementing Section 6403 isnât effective until January 2024, presumably the next step would be for FinCEN to publish a notice of proposed rulemaking either related to the access of the database which houses beneficial ownership information, or a revision of the CDD requirements for financial institutions. Itâs this latter rule that financial institutions are most anxiously awaiting, as that should signal a change in information collection requirements for banks. It is anticipated that banks will be collecting less information after the effective date of the final rule that revises the CDD requirements, so itâs no wonder that institutions are feverishly awaiting these revisions.
Resources
Compliance Alliance published a summary of the 2021 NPRM earlier this year. A summary of the final rule is pending and will be uploaded to our website as soon as it is available. If you have any questions about the final rule in the meantime, reach out to us on the hotline.