Bank Engagement

How a bank engages an external NPL workout advisor under TPRM. Vendor selection lifecycle. Due diligence. Contracting. Ongoing monitoring.

Banks engage external NPL workout advisors under the Third-Party Risk Management (TPRM) framework established by OCC Bulletin 2023-17, FDIC FIL-23-029, and Federal Reserve SR 23-04, with risk-proportional implementation guidance for community banks in the OCC 2024 Community Bank TPRM Guide. The engagement structure differs from law-firm engagement, broker engagement, or general consultant engagement — TPRM is its own discipline.

Below: how a bank actually engages an NPL workout advisor under TPRM, what documentation the bank produces, what the vendor needs to provide, and how the engagement runs through its lifecycle.

The TPRM Lifecycle Applied to NPL Workout Vendor Engagement

Stage 1 — Planning

The bank first determines whether external NPL workout advisory is warranted given strategic objectives, in-house capacity, and risk appetite. Triggers that typically prompt external engagement:

• NPL portfolio exceeds in-house workout team capacity
• Specific loan workout requires specialized expertise (CMBS structure, cross-border, complex capital stack, unusual collateral type)
• Bankruptcy proceeding requires litigation-adjacent expertise that exceeds in-house counsel comfort
• Regulatory examination feedback indicates need for stronger workout discipline
• Cost-effectiveness analysis favors external vendor over in-house headcount
• Time-to-decision pressure favors external rapid-response capacity over in-house ramp-up

For an AI-augmented NPL workout practice, time-to-decision and parallel scenario modeling are typically the differentiating value propositions vs. in-house workout teams that operate sequentially.

Stage 2 — Due Diligence and Vendor Selection

Due diligence assesses the vendor's ability to perform as expected, adherence to bank policies, regulatory compliance, and ability to conduct activities in a safe and sound manner. For NPL workout advisors, this typically includes:

• Track record. Documented prior workout engagements with outcomes (where confidentiality permits); references; case studies illustrating workflow.
• Professional licensure. Real estate licensure status, any securities licensure, contractor licensure (if applicable to collateral type), professional designations.
• Regulatory clean record. No outstanding state or federal regulatory actions; no professional license suspensions or revocations.
• Engagement-letter framework. Vendor's standard engagement-letter terms, including scope discipline, conflict-of-interest discipline, confidentiality provisions, and termination triggers.
• AI-tooling-and-disclosure posture. If vendor uses AI tools in the analysis, the vendor's disclosure framework — what AI does, what practitioner reviews, what client-facing deliverable framing is.
• Insurance. Errors-and-omissions coverage adequate to the engagement scope; cyber liability coverage if handling bank-confidential information; general liability.
• References. Prior bank engagements as references where confidentiality permits.

Documentation depth scales with risk per the TPRM proportionality principle. A community bank engaging this practice for a $2M single-loan workout review applies lighter documentation than a regional bank engaging for a $200M portfolio review.

Stage 3 — Contract Negotiation

The engagement letter and contract document the agreed terms. Standard TPRM-aligned NPL workout engagement letter elements:

• Scope. Specific loans or portfolio in scope; analytical scope (workout-path evaluation, capital-impact analysis, regulatory-framework analysis); deliverable scope (memo, model, oral briefing, all of the above).
• Deliverables. Specific written work products with format, length, and quality standard.
• Timeline. Initial deliverable due date and any milestone schedule.
• Pricing. Fixed fee, hourly with cap, contingent fee (rare — typically prohibited under most TPRM structures), or hybrid.
• Confidentiality. Mutual confidentiality covering bank-confidential information, loan file contents, borrower information, and vendor analytical methodology.
• Conflicts. Conflict-check process; ongoing conflict-of-interest discipline; representation of bank vs. borrower discipline.
• AI-assistance disclosure. Acknowledgment of AI-assisted analysis where applicable; practitioner review-and-finalize commitment.
• Audit rights. Bank's right to audit vendor's workflow and documentation if regulatory examination requires.
• Termination triggers. Documented termination notice period, knowledge transfer protocol, return of bank-confidential information.
• Regulatory representations. Vendor representations regarding professional licensure status, no outstanding regulatory actions, AML/sanctions compliance posture.

Stage 4 — Ongoing Monitoring

During the engagement, the bank conducts ongoing monitoring proportional to the engagement risk:

• Status updates. Periodic written or oral status updates per engagement timeline.
• Deliverable review. Bank-side review of vendor deliverables before client-facing or borrower-facing use.
• Compliance posture verification. Confirmation that vendor continues to satisfy TPRM compliance requirements throughout engagement (licensure remains current, insurance remains in force, no new regulatory actions).
• Issue escalation. Defined escalation path for issues discovered during engagement (compliance concern, scope disagreement, deliverable quality issue).

Stage 5 — Termination

Engagement termination is documented per the engagement-letter terms:

• Termination notice. Written notice from bank or vendor per agreed notice period.
• Knowledge transfer. Vendor delivers final work product, transitional briefings if required, and any in-progress analysis state.
• Bank-confidential information return. Vendor returns or certifies destruction of bank-confidential information per confidentiality terms.
• Ongoing obligations. Any post-termination obligations (confidentiality, indemnification for prior work product) documented as surviving termination.
• Post-engagement debrief. Optional bank-side post-engagement review for lessons-learned and TPRM vendor-list maintenance.

Documentation Package — What This Practice Provides Upfront

For TPRM-vendor-friendly engagement, this practice provides a standard documentation package upfront to reduce the bank's due diligence burden:

• Practitioner CV with credential detail (Wharton REI&A, UC Berkeley CE, KB-1 contractor, AZ Real Estate Salesperson, Harvard Agentic AI Intensive)
• Professional licensure verification links (ADRE license lookup, AZ ROC for KB-1)
• Insurance certificates upon execution of engagement letter
• Standard engagement letter template (modifiable per engagement scope and bank-specific TPRM requirements)
• AI-tooling-and-disclosure framework documentation
• Confidentiality and conflict-check processes
• Sample deliverable formats (anonymized prior work)
• References (subject to prior-engagement confidentiality restrictions)

How an Initial Bank Engagement Conversation Goes

Initial conversation typically covers:

• Bank's NPL situation in scope (single loan, portfolio segment, full portfolio review)
• Bank's analytical objective (workout-path recommendation, capital-impact analysis, regulatory-framework synthesis, all of the above)
• Timeline pressure
• Bank-side TPRM documentation requirements (community-bank-proportional, regional-bank-standard, large-bank-formal)
• Engagement structure preference (fixed fee, hourly with cap, hybrid)
• Practitioner availability and bandwidth fit
• Any specific bank-policy requirements that affect engagement structure

Initial conversation is typically 30-45 minutes; vendor proposal back to bank within 3-5 business days following the conversation; engagement-letter execution within 5-10 business days following proposal acceptance.

Proportionality in Practice

A community bank engaging this practice for a $2M single-loan workout review under the 2024 Community Bank TPRM Guide typically operates with:

• Single-page engagement letter
• Verbal reference check (1-2 calls)
• License verification via public ADRE database
• Insurance certificate filed in vendor folder
• Email-based status updates during engagement
• Email-based termination acknowledgment

A regional bank engaging the same practice for a $50M portfolio review typically operates with:

• Multi-page engagement letter with detailed scope
• Written reference check (3-5 references)
• License verification + regulatory action search
• Insurance certificate review by bank counsel
• Conflict-of-interest written attestation
• Formal monthly status reports
• Mid-engagement bank-side compliance check-in
• Formal termination notice + knowledge-transfer deliverable

A large national bank engagement adds: formal vendor onboarding process, vendor risk committee review, ongoing monitoring through bank vendor management platform, audit rights formalized, and post-engagement vendor performance scoring.

What This Practice Does NOT Do at the Bank Engagement Level

• Act as banking regulator or provide authoritative regulatory interpretation. Specific regulatory opinions require qualified bank regulatory counsel.
• Provide legal advice on bankruptcy proceedings, foreclosure law, or workout legal mechanics. Qualified counsel handles these.
• Solicit securities investments or provide investment-advisor services. The practice is not a registered investment advisor or broker-dealer; Series 82 is targeted ~2027, NOT currently held.
• Provide CPA-services-equivalent accounting opinions on loan-loss provisioning, charge-off treatment, or regulatory capital calculations. Bank's own internal accounting and external auditors handle these.

Cross-Border Engagement

For US-based distressed debt funds engaging this practice for European NPL portfolio diligence (Cerberus, Apollo, Lone Star, Davidson Kempner, and similar US fund counterparties active in European NPL acquisitions), the engagement structure adapts to ECB NPL Guidelines framework expectations. See cross-border for detail on the European NPL framework and US fund-side cross-border deal structures.

About the Operator

George Howell Ward · Arizona Real Estate Salesperson SA528635000 · Landmark ACM, LLC · Agentic AI Consultant

Wharton Real Estate Investment & Analysis Certificate · UC Berkeley B.S. Civil Engineering (Construction Management emphasis) · Arizona KB-1 Commercial and Residential Contractor (25 years; GWGC LLC ROC #344366) · Harvard Agentic AI Intensive (summer program). Full bio at georgehowellward.com.