Alpha Covenant Holdings · Duty Sheet · generated 2026-10-26 21:05 UTC · free · all sheets

Interagency Guidance on Third-Party Relationships: Risk Management (OCC Bulletin 2023-17; FDIC FIL-29-2023; FRB SR 23-4) — ongoing monitoring record

Applies to: Banks, savings associations and credit unions and their vendor-management teams; examiners reviewing the third-party file · Rule text: https://www.occ.gov/news-issuances/bulletins/2023/bulletin-2023-17.html

The question the rule asks

The guidance expects a bank to perform ongoing monitoring of third parties through the life of the relationship — including the third party's legal and regulatory compliance and public enforcement actions — and to document it so examiners can see what was checked and when. It names no particular database; the bank chooses, and must be able to show the record.

The party this sheet is about

Colonial Pipeline Company · keys supplied: none — exact printed name only · matching: screening-2026-06f: every check is an exact-name (or exact-UEI / exact-NPI / exact-EIN / exact-CIK) lookup against the official file named on the line; nothing is inferred from similar names, owners or affiliates

Receipt r_064831b51f3e4926 · read 2026-10-26 21:05:57 UTC · SHA-256 6101c5c57f6ae6358a0599b5302b00fd32106093f5d48c67b4e6a7fe2a857dbd · verify: https://alphacovenantholdings.com/r/r_064831b51f3e4926

The official files that answer it, as read on that date

SourceRoleStateRecordsWhat it printed
SAM.gov Exclusions — Public Extract V2 (GSA, daily)answers the questionanswered0No entry under this exact name/UEI in the SAM extract fetched 2026-10-26 (SAM_Exclusions_Public_Extract_V2_26299.ZIP).
U.S. Treasury OFAC — Specially Designated Nationals and Blocked Persons List (SDN.CSV)answers the questionanswered0No entry under this exact name or listed alias on the SDN list fetched 2026-10-25.
Consolidated Screening List (trade.gov) — BIS, State and Treasury lists, OFAC SDN excluded here because it is read directlyanswers the questionanswered00 export-control or sanctions list entries (BIS, State, Treasury non-SDN) under this exact printed name
CFPB Consumer Complaint Database (company field equals this exact name as the CFPB prints it)supportinganswered0No complaint in the CFPB database where the company field equals this exact name.
SEC EDGAR (registrant submissions index, data.sec.gov)supportinganswered0EDGAR's entity index lists no registrant under this exact printed name (a registrant may file under a different printed name — see the EDGAR company search).
Federal Audit Clearinghouse (GSA) — single audit filings under 2 CFR 200 Subpart FsupportingansweredNo single-audit filing is on file for this exact name. Entities below the federal-spending threshold do not file; this is not a finding.
EPA ECHO (Enforcement and Compliance History Online) — facility recordssupportinganswered0ECHO returned 235 facility record(s) for a name search on 'Colonial Pipeline Company'; 0 carry this exact printed name. Each row links to EPA's own Detailed Facility Report.
HHS OCR breach portal (covered-entity name equals this name)supportingansweredNo breach report filed under this exact name in the portal's current list.
IRS Tax Exempt Organization Search — Automatic Revocation of Exemption list and Publication 78 data (bulk files)supportinganswered00 automatic-revocation entries under this exact printed legal name. Publication 78: no organization listed under this exact printed legal name (absence is not a statement about exemption).
HHS Office of Inspector General — LEIE (monthly downloadable file)supportinganswered0No entry under this exact name in the OIG file fetched 2026-10-25.

What to record in the file

A dated receipt per third party, re-read monthly by roster with the line-by-line changes since the prior month: SAM exclusions, OFAC SDN and the Consolidated Screening List with file dates; the CFPB complaint count where the company field equals the exact name (candidates listed, not counted); SEC EDGAR filings by CIK; FAC, ECHO, OCR and IRS rows as printed. The receipt records the read; the risk assessment, criticality tier and conclusion are the bank's own and belong in the bank's file, not on this page. FinCEN beneficial-ownership data is not public and is not read.

What this sheet does not decide

The receipt does not decide eligibility, responsibility, identity or compliance. It records what each official file printed for an exact key or exact printed name on a date. A same-name row is a candidate to be resolved by the reader, not a match. Answering the form's question is the applicant's or reviewer's act; this sheet puts the dated record beside it.

Full receipt (all sources, known limits, print record): screening record · Methodology: https://alphacovenantholdings.com/methodology · Corrections (free, public log): https://alphacovenantholdings.com/corrections