A completedMaterialityAssessmentFinancialCrimesIf 1.01AND 1.17areapplicable21calendardaysPushthroughassignedprogramsVRC1 –VRO –VRC2Third PartyProviderManagementPolicyOCCBulletin2013-29What isthe singletransactionlimit?Upon acompletedFinancialCrimesreviewReview thefile posted inthe VMOSharePointsiteThirdParty RiskSummaryRiskRatingVRCBCTier@bokf.comAnalysisbased on thenature of theengagementBankConfidentialDataHighest RiskRating of allactiveRelationshipsAccess@WorkRequestRegenerateHighestInherent RiskofCompliance,BC, and SRMImpactscustomersbroadly enoughto threatenmarket shareAnnualReportIneffective14calendardaysModeratelyLowFormerlycriticalFIS3DaysYesHighValueAddedResellerFDRemediationTrackerReportNoRegulatoryperspectiveincluded inannual criticalreportingHIPAABusinessProcessTiersAnNDAPropertyMaintenance2020latenoticelog-noreply@spfarm.bok.comSSAE18TPRSSmallTeamNon-USHeadquartersor Non-USOperationsOverallcomments3/26/2019AnyTierJuneMonthlyThird PartyProviderManagementStandardDecemberSharedSLAsOFACHit1,322AnyoneCuba1VicePresidentVRC1'sEvaluationQueue1,0695.015OCC2/14/2019Criticals and“WhollyOutsourcedDepartment”sErnstandYoungCoupaBlankSupplierNameChangeCommitteeFalseRiskCouncilExemptCongaDelegation100Medium1bA completedMaterialityAssessmentFinancialCrimesIf 1.01AND 1.17areapplicable21calendardaysPushthroughassignedprogramsVRC1 –VRO –VRC2Third PartyProviderManagementPolicyOCCBulletin2013-29What isthe singletransactionlimit?Upon acompletedFinancialCrimesreviewReview thefile posted inthe VMOSharePointsiteThirdParty RiskSummaryRiskRatingVRCBCTier@bokf.comAnalysisbased on thenature of theengagementBankConfidentialDataHighest RiskRating of allactiveRelationshipsAccess@WorkRequestRegenerateHighestInherent RiskofCompliance,BC, and SRMImpactscustomersbroadly enoughto threatenmarket shareAnnualReportIneffective14calendardaysModeratelyLowFormerlycriticalFIS3DaysYesHighValueAddedResellerFDRemediationTrackerReportNoRegulatoryperspectiveincluded inannual criticalreportingHIPAABusinessProcessTiersAnNDAPropertyMaintenance2020latenoticelog-noreply@spfarm.bok.comSSAE18TPRSSmallTeamNon-USHeadquartersor Non-USOperationsOverallcomments3/26/2019AnyTierJuneMonthlyThird PartyProviderManagementStandardDecemberSharedSLAsOFACHit1,322AnyoneCuba1VicePresidentVRC1'sEvaluationQueue1,0695.015OCC2/14/2019Criticals and“WhollyOutsourcedDepartment”sErnstandYoungCoupaBlankSupplierNameChangeCommitteeFalseRiskCouncilExemptCongaDelegation100Medium1b

Wild Card - Call List

(Print) Use this randomly generated list as your call list when playing the game. There is no need to say the BINGO column name. Place some kind of mark (like an X, a checkmark, a dot, tally mark, etc) on each cell as you announce it, to keep track. You can also cut out each item, place them in a bag and pull words from the bag.


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
  1. A completed Materiality Assessment
  2. Financial Crimes
  3. If 1.01 AND 1.17 are applicable
  4. 21 calendar days
  5. Push through assigned programs
  6. VRC1 – VRO – VRC2
  7. Third Party Provider Management Policy
  8. OCC Bulletin 2013-29
  9. What is the single transaction limit?
  10. Upon a completed Financial Crimes review
  11. Review the file posted in the VMO SharePoint site
  12. Third Party Risk Summary
  13. Risk Rating
  14. VRC
  15. BCTier@bokf.com
  16. Analysis based on the nature of the engagement
  17. Bank Confidential Data
  18. Highest Risk Rating of all active Relationships
  19. Access@Work Request
  20. Regenerate
  21. Highest Inherent Risk of Compliance, BC, and SRM
  22. Impacts customers broadly enough to threaten market share
  23. Annual Report
  24. Ineffective
  25. 14 calendar days
  26. Moderately Low
  27. Formerly critical
  28. FIS
  29. 3 Days
  30. Yes
  31. High
  32. Value Added Reseller
  33. FD Remediation Tracker Report
  34. No
  35. Regulatory perspective included in annual critical reporting
  36. HIPAA
  37. Business Process Tiers
  38. An NDA
  39. Property Maintenance
  40. 2020
  41. latenoticelog-noreply @spfarm.bok.com
  42. SSAE18
  43. TPRS Small Team
  44. Non-US Headquarters or Non-US Operations
  45. Overall comments
  46. 3/26/2019
  47. Any Tier
  48. June
  49. Monthly
  50. Third Party Provider Management Standard
  51. December
  52. Shared SLAs
  53. OFAC Hit
  54. 1,322
  55. Anyone
  56. Cuba
  57. 1
  58. Vice President
  59. VRC1's Evaluation Queue
  60. 1,069
  61. 5.01
  62. 5
  63. OCC
  64. 2/14/2019
  65. Criticals and “Wholly Outsourced Department”s
  66. Ernst and Young
  67. Coupa
  68. Blank
  69. Supplier Name Change Committee
  70. False
  71. Risk Council
  72. Exempt
  73. Conga
  74. Delegation
  75. 100
  76. Medium
  77. 1b