Does any one have a list of area requiring a risk assessment for a bank?
I have OFAC, CIP, BSA/AML, ID Theft/Red Flags and IT/IS assessments.
However, I know there are more but I just don't know what.
Please help!

Thank you

We have a compliance risk assessment that lists all of the regs (both federal and state) and we risk rate our risk level based on previous exam/audit performance, reputation risk, penalties associated with violations, etc. As far as the FDIC goes, they've expected to see that as part of our overall compliance management system (CMS). As for your comment on IT/IS, that is just part our GLBA program, we have a separate assessment for non-IT systems (people, paper, documents with confidential information, etc).

Remote Deposit Capture also requires a risk assessment. See
http://www.fdic.gov/news/news/financial/2009/fil09004.html

I believe vendor management is a risk assessment

I do not believe there is a tecnical requirement for a compliance risk assessment - but banks do generally perform risk assesssments in this area, covering all areas of compliance risk (as Pizza Queen descriped above).

GLBA

Another one - Fair Lending

Here is a good reference for you:

Risk area on BOL

ACH

I was told at a IT conference the following: BCP, BSA, OFAC, eBanking, Infosec, Operations, Outsourcing Tech Risks, Management, Audit, Wholesale Payment Systems, Reatil Payment Systems, Development and Acq., plus any required for loan dept.

I sure am hoping I was misinformed, YIKES!

Bump

Compliance Program

Basically, other than those explicitly called for, you need a risk assessment anywhere you are making risk based decisions.

It would be so nice for the FDIC to develope a list of all policies required, all risk assessments required, etc.