Signal Scanner · REGULATION, STANDARDS & POLICY CHANGE · 21 September 2026

US Bank Examiners Must Now Show Likely Material Harm Before Raising a Finding

The OCC and FDIC have codified the evidentiary test their own examiners must meet. From 2 November 2026 a Matter Requiring Attention needs material financial harm, not a documentation gap, and the informal criticism channels are abolished. Exposed: banks, boards, internal audit, compliance and the examiners themselves.

Read as deregulation, the August rule looks like one more item on a long 2026 list. The more consequential thing is its form. The OCC and the FDIC did not relax a requirement on banks; they wrote a burden of proof onto themselves. From 2 November an examiner may raise a Matter Requiring Attention only where a practice is contrary to generally accepted standards of prudent operation and could reasonably be expected to cause material financial harm, and may call something unsafe or unsound only where that harm is likely rather than merely possible. Supervisory recommendations and matters requiring board attention are gone. The Federal Reserve did not sign.

Signal Identification

A regulatory pivot aimed at the regulator rather than the regulated. The content of prudent banking is untouched; what changed is who must prove what, and in what form. A judgement that was exercised in conversation and recorded in a letter now has to satisfy a codified test and survive being read back. The exposure is that supervisory findings become contestable documents, and that the discretion removed here reappears elsewhere.

Time horizon: 1-4 years (reputation-risk rule effective 9 June 2026; final rule published 1 September 2026 and effective 2 November 2026; review and closure of legacy supervisory criticisms running through 2027)
binds 1-3 yrs2026202720282029to 2030
Plausibility band: High
LowMediumHigh
Geographic / Jurisdictional Scope: Primary: the United States, covering national banks and federal savings associations supervised by the OCC and state non-member banks supervised by the FDIC. Spillover: state member banks and holding companies under a Federal Reserve that did not join, foreign banking organisations with US subsidiaries, and the United Kingdom and European Union, where judgement-led supervision faces the same objection.
PrimaryUnited States
SpilloverFed-supervised firmsForeign banks in USUKEU
Sectors exposed:
Banking and thriftsBank boards and audit committeesInternal audit and complianceSupervisory and examination staffBank legal and litigationDeposit insurance and resolutionBank M&A and licensingBank credit analysis and ratings

What's Changing

The rule was published on 1 September at 91 FR 56004 and takes effect on 2 November. Two thresholds now sit in the text where discretion used to. An unsafe or unsound practice requires harm that is likely: “The probability that a practice, act, or failure to act, if continued, will materially harm the financial condition of the institution or present a material risk of loss to the DIF must be more than speculative or merely possible” (Federal Register, 01/09/2026). The agencies invited comment on fixing that likelihood at a number, floating 10% or 51%, and declined to adopt one. A Matter Requiring Attention sits a notch lower, at harm that could reasonably be expected, and the OCC records that “the final rule creates a uniform standard for the issuance of an MRA to supervised banks” (Office of the Comptroller of the Currency, 27/08/2026).

What goes with it matters as much. “Gone are supervisory recommendations. OCC and FDIC bank examiners are instead limited to more objective actions, including issuing an MRA, pursuing an enforcement action, or citing what the regulation terms ‘other violations’”, and the FDIC's matters requiring board attention are eliminated (Morgan Lewis, 08/09/2026). The agencies frame the purpose as ensuring “that examiners prioritize concerns related to material financial risks over those regarding policies, process, documentation, and other nonfinancial risks” (Federal Deposit Insurance Corporation, 27/08/2026).

The clean-up has already started. The FDIC “has already begun reviewing and closing prior MRAs that do not meet the rule standards” (Skadden, 10/09/2026), and its chair has put the scale at a large majority of outstanding criticisms (Banking Dive, 28/08/2026).

The threshold an examiner must now clear, and the channels that closed

WHAT AN EXAMINER MUST SHOW, FROM 2 NOVEMBER 2026 MERELY POSSIBLE No finding available COULD REASONABLY BE EXPECTED: MRA LIKELY: UNSAFE OR UNSOUND PRACTICE ALREADY CAUSED MATERIAL HARM The agencies invited comment on fixing the likelihood at a minimum threshold, 10% or 51%, and adopted neither. THE EXAMINER TOOLKIT, BEFORE AND AFTER BEFORE Supervisory recommendation Matter requiring board attn Matter requiring attention Enforcement action AFTER Removed Removed Matter requiring attention Enforcement action Other violations Two of the four channels an examiner could use are closed. Both were the informal ones. The Federal Reserve is not a party to the rule, so its supervised firms keep the prior toolkit.

Sources: the Federal Register final rule of 1 September 2026 for the two thresholds and the rejected numeric test; the OCC bulletin and FDIC release of 27 August 2026 for the MRA standard; Morgan Lewis for the removal of supervisory recommendations and matters requiring board attention.

Disruption Pathway

Stage one runs to year-end and is administrative: legacy criticisms are graded against the new test, most are closed, and the survivors reach boards carrying more weight than in June. Stage two is the first contested finding, likely in 2027, when a bank argues that a criticism fails the materiality test and an examiner has to answer in writing. Stage three is divergence. The Federal Reserve is not a party to the rule (Morgan Lewis, 08/09/2026), so a holding company and its national bank subsidiary can be examined against different standards of proof, and the gap widens with every finding that is raised on one side and not the other.

Stress concentrates in three places. Examiner capacity is the first, because evidencing likely material harm takes analytical work that identifying a policy gap did not. The early-warning channel is the second: Jeremy Kress of the University of Michigan holds the rule “exceeds the OCC's/FDIC's statutory authority, conflicts with established judicial precedent, and undermines effective supervision” (Banking Dive, 28/08/2026). Charter choice is the third, now that the standard of proof varies by supervisor. Two adaptations follow. Banks build a challenge function, staffed the way they staff an enforcement defence, because a finding that must meet a written test can be argued against a written test. And the agencies lean harder on the instruments the rule did not touch, ratings and applications among them.

Why This Matters Now

This lands on chief risk officers, general counsel, heads of internal audit and audit committee chairs, and on the examiners across the table from them. The decision architecture that needs revising is the remediation portfolio: most bank assurance plans were built around a stock of findings that is being deleted, justified by an expectation that no longer exists in that form. Boards should not simply bank the relief. A closed criticism is not a resolved weakness, and the agencies keep every enforcement power they had, now pointed at a narrower set of cases. The work this cycle is deciding which closed items to keep funding on their merits, and which to stop.

Decision-action posture for this signal: Decide — the rule binds on 2 November, the FDIC is already closing criticisms, and the remediation and assurance budgets built on those criticisms are set this cycle, so the board owns the call now rather than after the first examination under the new standard.

Counter-Argument

The strongest objection is that supervisory power was never in the criticism letter. Examiners keep the CAMELS ratings, and the Bank Policy Institute, arguing for reform of them, describes exactly where the discretion lives: “Examiners use the uniquely subjective ‘M’ or ‘Management’ rating to dictate bank behavior: a bank that does not obey examiner mandates on how to manage its operations or conduct its business may receive an unsatisfactory Management rating, regardless of its financial strength” (Bank Policy Institute, 20/08/2026). A rule that closes two channels and rations a third may move the judgement rather than remove it, and a rule can be rescinded, which is what its academic critics urge.

Migration is itself the finding worth planning for, because a judgement expressed as a rating is harder to answer than one expressed as a criticism. And reversibility does not run backwards: the criticisms closed in late 2026 stay closed, and the examination record of 2026 to 2028 is written under this test whatever a later administration does with it.

Implications

This report's reading is that the durable part is the principle, not the instrument. The same agencies removed reputation risk from supervision in April, citing “the subjectivity of reputation risk, the inefficacy of reputation risk at identifying risks to safety and soundness or other statutory mandates, and the potential for regulatory overreach and abuse” (Federal Register, 10/04/2026). Two rules in five months establish the same test: supervisory discretion is legitimate only where it can be written down. The inflection window runs from 2 November to the first contested finding. Banks with a documented challenge capability gain, and so do the agencies' litigators. Examiners lose the quiet word, and the supervised firms that relied on it lose an early warning.

Early Indicators to Monitor

Disconfirming Signals

Strategic Questions

Keywords

Bank supervision; Matters Requiring Attention; unsafe or unsound practice; material financial risk; OCC; FDIC; 12 U.S.C. 1818; supervisory recommendations; matters requiring board attention; CAMELS ratings; examiner discretion; reputation risk

Bibliography

Source tiers: Tier 1, governments, regulators and intergovernmental bodies. Tier 2, think-tanks, academic institutes, major consultancies and quality data providers. Tier 3, quality journalism and specialist trade press. Tier 4, vendor, company and practitioner sources, used only as directional corroboration.

This Signal Scan is one component of a Shaping Tomorrow intelligence cycle on Regulation, Standards & Policy Change. Every monitored topic also includes monthly Change Trackers that assess what is materially shifting in momentum, and a quarterly Decision Intelligence briefing that converts the cycle into board-level strategic implications. Cycles may also close with Action Triggers, an end-of-cycle synthesis that reads across the three formats and surfaces patterns no single deliverable carries on its own. Continuous intelligence on this topic is available as a Single-Topic or Multi-Topic programme.

Discuss a Tailored Programme

Prepared by Shaping Tomorrow: 21 September 2026