If we were to begin offering investment services through a third party, what type of compliance related issues (directly or indirectly) should we be concerned with? We all have to comply with something right?
I was asked about the reps access to bank's network, having keys to bank office, etc.

Might anyone offer any recommendations????

For starters, you'll need to look at consumer protection for sales of insurance by depository institutions, privacy, and the Interagency Statement on Retail Sales of Nondeposit Products. A lot will depend on how the program is set-up.

I'd start with the Interagency Policy Statement on Non-deposit Investment Products. It's a must read before starting a program. It discusses Board responsiblities and other compliance responsibilities and the need to have a program.

I'd also look at your regulators exam procedures whether they are S&S or compliance they discuss what you need to be concerned with.