EX-99.2 9 fult12312014ex992.htm EXHIBIT 99.2 FULT 12.31.2014 EX 99.2


Exhibit 99.2
FEDERAL DEPOSIT INSURANCE CORPORATION
WASHINGTON, D.C.





In the Matter of

FULTON BANK OF NEW JERSEY
MOUNT LAUREL, NEW JERSEY

(INSURED STATE NONMEMBER BANK)
 

CONSENT ORDER


FDIC-14-0406b



The Federal Deposit Insurance Corporation (“FDIC”) is the appropriate Federal banking agency for Fulton Bank of New Jersey, Mount Laurel, New Jersey (“Bank”), under section 3(q) of the Federal Deposit Insurance Act (“Act”), 12 U.S.C. § 1813(q).
The Bank, by and through its duly elected and acting Board of Directors (“Board”), has executed a STIPULATION AND CONSENT TO THE ISSUANCE OF A CONSENT ORDER (“CONSENT AGREEMENT”), dated February 25, 2015, that is accepted by the FDIC. With the CONSENT AGREEMENT, the Bank has consented, without admitting or denying any unsafe or unsound banking practices or violations of law or regulation including weaknesses in the Bank’s Bank Secrecy Act (“BSA”) Compliance Program, to the issuance of this Consent Order (“ORDER”) by the FDIC.
Having determined that the requirements for issuance of an order under section 8(b) of the Act, 12 U.S.C. § 1818(b), have been satisfied, the FDIC hereby orders that:
BOARD SUPERVISION
1.The Board shall increase its supervision and direction of the Bank’s BSA Compliance Program, assuming full responsibility for the approval of sound BSA policies, procedures and processes, consistent with the role and expertise expected for directors of banks of comparable size and risk.





MANAGEMENT
2.    The Bank shall have and retain management qualified to oversee all aspects of the Bank’s BSA Compliance Program, including a BSA Officer, as described in paragraph 3. Management shall ensure compliance with all applicable laws and regulations that govern BSA compliance. Each member of management shall have the qualifications and experience commensurate with his or her duties and responsibilities related to applicable BSA laws and regulation.
BSA OFFICER

3. Within 90 days from the effective date of this ORDER, the Bank shall designate a qualified individual (“BSA Officer”), who may be a person who also performs certain BSA functions for the Bank’s parent holding company, Fulton Financial Corporation (“FFC”), relating to its BSA/AML Compliance Program, in which the Bank participates, provided such person is acceptable to the Regional Director of the FDIC’s New York Regional Office (“Regional Director”) and the Commissioner of Banking and Insurance of the State of New Jersey (“Commissioner”) and has the requisite delegated and managerial authority, and an adequate level of appropriate resources (including resources provided by FFC or other vendors) to implement and enforce the Bank’s BSA compliance in all material respects with all BSA and Anti-Money Laundering (“BSA/AML”) laws and regulations. The BSA Officer shall:
(a)      have sufficient decision-making authority to monitor and ensure compliance with

the BSA;

(b)      report monthly directly to the Board; and

(c)     be responsible for assuring the proper and timely filing of Suspicious Activity Reports (“SARs”), Currency Transaction Reports (“CTRs”), Reports of International Transportation of Currency or Monetary Instruments (“CMIRs”), Reports of Foreign Bank and Financial Accounts (“FBARs”) and any other BSA required reports.





BSA RISK ASSESSMENT
4. (a)    Within 60 days from the effective date of this ORDER, the Bank shall review and enhance the risk assessment of the Bank's operations ("Risk Assessment"). Subsequently, the Bank shall conduct periodic Risk Assessments, no less than annually, consistent with the guidance for risk assessments set forth in the Federal Financial Institutions Examination Council Bank Secrecy Act/Anti-Money Laundering Examination Manual (the "BSA Manual"), and shall establish appropriate written policies, procedures, and processes regarding Risk Assessments. The Risk Assessment shall address all pertinent risk factors that affect the overall BSA/AML risk profile of the Bank and ensure that risk ratings are accurate and well supported through qualitative and quantitative data.         (b) Based on the results of the Risk Assessment, a comprehensive system of internal controls to mitigate the risk shall be developed and implemented.
OFAC RISK ASSESSMENT
5.    (a)    Within 60 days from the effective date of this ORDER, the Bank shall review and enhance its Office of Foreign Assets Control (“OFAC”) risk assessment (“OFAC Risk Assessment”). Subsequently, the Bank shall conduct periodic OFAC Risk Assessments, no less than annually, consistent with the guidance for OFAC risk assessments set forth in the BSA Manual, and shall establish appropriate written policies, procedures, and processes regarding OFAC Risk Assessments. The OFAC Risk Assessment shall address all pertinent risk factors that affect the overall OFAC risk profile of the Bank and ensure that risk ratings are accurate and well supported through qualitative and quantitative data.
(b)    Based on the results of the OFAC Risk Assessment, a comprehensive system of internal controls to mitigate the risk shall be developed and implemented.





BSA INTERNAL CONTROLS
6.    (a)     Within 90 days from the effective date of this ORDER, the Bank shall develop a revised system of internal controls designed to ensure full compliance with the BSA (“BSA Internal Controls”) taking into consideration the Bank’s size and risk profile, as determined by the Bank’s Risk Assessment.
(b)     At a minimum, such system of BSA Internal Controls shall include policies, procedures, and processes addressing the following areas:
(i)     Suspicious Activity Monitoring and Reporting: The Bank shall, taking into account its size and risk profile, revise and enhance its policies, procedures, processes, and systems for monitoring, detecting, and reporting suspicious activity being conducted in all areas within or through the Bank; and ensure the timely, accurate, and complete filing of SARs, with an appropriate level of documentation and support for management’s decisions to file or not to file a SAR, as required by law. These policies, procedures, processes and systems should ensure that all relevant areas of the Bank are monitored for suspicious activity and that alerts generated by the Bank’s suspicious activity monitoring systems are investigated and escalated appropriately. The Bank shall adopt measures to ensure that transaction monitoring and suspicious activity reporting functions that are outsourced to FFC are performed to meet regulatory requirements.
(ii)    Due Diligence: The Bank shall review and enhance its customer due diligence (“CDD”) policies, procedures and processes for new and existing customers to:
a.     be consistent with the guidance for CDD set forth in the BSA Manual;
b.     operate in conjunction with its Customer Identification Program (“CIP”); and
c.    enable the Bank to predict with relative certainty the types of transactions in which a customer is likely to engage.
(iii)    At a minimum, the CDD program shall provide for:






a. a risk assessment of the customer base through an appropriate risk rating system to ensure that the risk level of the Bank’s customers is accurately identified based on the potential for money laundering or other illicit activity posed by the customer’s activities, with consideration given to the purpose of the account, the anticipated type and volume of account activity, types of products and services offered, and locations and markets served by the customer;
b.an appropriate level of ongoing monitoring commensurate with the risk level to ensure that the Bank can reasonably detect suspicious activity and accurately determine which customers require enhanced due diligence (“EDD”);
c.a process to obtain and analyze a sufficient level of customer information at account opening to assist and support the risk ratings assigned;
d.a process to document and support the CDD analysis, including a method to validate risk ratings assigned at account opening, and resolve issues when insufficient or inaccurate information is obtained;
e.processes to reasonably ensure the timely identification and accurate reporting of known or suspected criminal activity, as required by the suspicious activity reporting provisions of Part 353 of the FDIC’s Rules and Regulations, 12 C.F.R. Part 353; and
f.measures to ensure that CDD services that are outsourced to FFC are performed to meet regulatory expectations.
(iv)     Enhanced Customer Due Diligence: The Bank shall establish EDD policies, procedures and processes to conduct EDD necessary for those categories of customers the Bank has reason to believe pose a heightened risk of suspicious activity, including, but not limited to, high risk accounts, as described in the September 8, 2014 BSA Report of Examination issued jointly by the FDIC and the New Jersey Department of Banking and Insurance (“2014 BSA ROE”). The EDD policies, procedures and processes should:





a.     be consistent with the guidance for EDD set forth in the BSA Manual; and
b.     operate in conjunction with its CIP and CDD policies, procedures and processes.
(v)    At a minimum, the EDD program shall include EDD procedures to:
a.determine the appropriate frequency for conducting ongoing reviews, based on customer risk level;
b.determine the appropriate documentation necessary to conduct and support ongoing reviews and analyses in order to reasonably understand the normal and expected transactions of the customer;
c.reasonably ensure the timely identification and accurate and complete reporting of known or suspected criminal activity against or involving the Bank to law enforcement and supervisory authorities, as required by the suspicious activity reporting provisions of Part 353 of the FDIC’s Rules and Regulations, 12 C.F.R. Part 353; and
d.
measures to ensure that EDD services that are outsourced to FFC
are performed to meet regulatory expectations.
(vi) The Bank shall review and enhance its CIP policies, procedures and processes to ensure that the Bank’s CIP is consistent with the guidance for CIPs set forth in the BSA Manual.
(vii)     The BSA internal control policies, procedures, processes, and practices shall operate in conjunction with each other, and be consistent with the guidance for account/transaction monitoring and reporting set forth in the BSA Manual, including arranging for the dissemination of a high risk customer list to appropriate departments within the Bank.
(c)    Within 10 days of completion, the Bank shall submit the revised BSA-related internal control policies and procedures to the Regional Director and the Commissioner for non-objection or comment. Within 30 days from receipt of non-objection or comments from the Regional Director or the





Commissioner, and after incorporation and adoption of all comments, the Board shall approve the revised BSA internal control policies, procedures, processes and practices, which approval shall be recorded in the minutes of the Board meeting. Thereafter, the Bank shall implement and fully comply with the revised internal control policies, procedures, and practices.
REPORTS
7.    The Bank shall review and enhance its policies, procedures and processes in order to appropriately detect reportable transactions and ensure that all required reports, including its CTRs, SARs, CMIRs, FBARs, and any other similar or related reports required by law or regulation are completed accurately and properly filed within required timeframes.
CORRECTIVE ACTION
8.    The Bank shall take all steps necessary, consistent with other provisions of this ORDER and sound banking practices, to eliminate and correct any unsafe or unsound banking practices and any violations of law or regulation cited in the 2014 BSA ROE.

DIRECTORS’ COMPLIANCE COMMITTEE


9.    Within 30 days from the effective date of this ORDER, the Board shall establish a directors’ BSA Compliance Committee (“Compliance Committee”), a majority of which members shall not be and shall not have been, involved in the daily operations of the Bank, and whose composition is acceptable to the Regional Director and the Commissioner, with the responsibility of overseeing the Bank’s compliance with this ORDER, the BSA laws and regulations and the Bank’s BSA Compliance Program. At least one member of the Compliance Committee shall be the Bank’s representative to the Special Joint Board Compliance Committee of FFC. The Compliance Committee shall receive comprehensive monthly reports from the Bank’s BSA Officer regarding the Bank’s compliance with BSA regulations and the Bank’s BSA Compliance Program. The Compliance Committee shall present a report to the Board, at





each regularly scheduled Board meeting, regarding the Bank’s compliance with this ORDER, the BSA laws and regulations, and the Bank’s BSA Compliance Program, which shall be recorded in the appropriate minutes of the Board meeting and retained in the Bank’s records.


PROGRESS REPORTS
10.    Within 45 days from the end of each calendar quarter following the effective date of this ORDER, the Bank shall furnish to the Regional Director and the Commissioner written progress reports detailing the form, manner, and results of any actions taken to secure compliance with this ORDER. All progress reports and other written responses to this ORDER shall be reviewed and approved by the Board, and made a part of the Board minutes.
SHAREHOLDER DISCLOSURE
11. Within 30 days from the effective date of this ORDER, the Bank shall send a copy of this ORDER, or otherwise furnish a description of this ORDER, to FFC. The description shall fully describe the ORDER in all material aspects.
MISCELLANEOUS
It is expressly understood that if, at any time, the Regional Director or the Commissioner shall deem it appropriate in fulfilling the responsibilities placed upon them under applicable law to undertake any further action affecting the Bank, nothing in this ORDER shall bar, estop, or otherwise prevent the FDIC or the Commissioner or any other federal or state agency or department from taking any other action against the Bank or any of the Bank’s current or former institution-affiliated parties.
This ORDER shall be effective on the date of issuance.
The provisions of this ORDER shall be binding upon the Bank, its institution-affiliated parties, and any successors and assigns thereof.





The provisions of this ORDER shall remain effective and enforceable except to the extent that and until such time as any provision has been modified, terminated, suspended, or set aside by the FDIC.

Issued Pursuant to Delegated Authority
Dated: February 25, 2015
By:

/s/ John P. Conneely                    
John P. Conneely
Deputy Regional Director
New York Regional Office
Federal Deposit Insurance Corporation