Initial research checked September 27, 2026. Source dates, operative law and proposed changes are distinguished; examples are illustrative.
Status and the correct legal phrase
The relevant term is “unsafe or unsound practice.” On August 27, 2026 the OCC and FDIC announced a final rule defining it and revising standards for supervisory communications. The rule was published September 1 and becomes effective November 2, 2026. As of September 27, it is final but not yet effective. [1, 2]
Its codified locations are OCC 12 CFR 4.92 and FDIC 12 CFR 305.1. It is separate from OCC Part 30 and from the FFIEC’s proposed CAMELS revisions. Agency scope matters: the joint rule should not automatically be represented as a Federal Reserve rule. [2]
The two elements of an unsafe or unsound practice
In paraphrase, the definition combines conduct contrary to accepted prudent operation with material financial harm already caused, likely future material harm if continued, or a likely material risk of loss to the Deposit Insurance Fund. Acts and omissions can be assessed together. The standard concerns financial condition rather than a generic objection to an institution’s business choices. [2]
The OCC’s explanation connects financial harm to capital, asset quality, earnings, liquidity and market-risk sensitivity. It also emphasizes tailoring to the institution’s risk profile. [3]
Analytical implication: an examiner and a bank should be able to explain the causal chain. What practice is deficient? What is the exposure? How would harm occur? Why is it material for this institution? A disagreement over policy wording is different from evidence that a lender cannot identify delinquent loans or fund customer withdrawals.
MRAs have a different threshold
Under the final text, a matter requiring attention can concern imprudent conduct reasonably expected to create specified material harm under current or reasonably foreseeable conditions, or an actual violation of banking or banking-related law or regulation. That forward-looking MRA test should not be collapsed into the definition used for unsafe-or-unsound-practice enforcement. [2]
The agencies also distinguish informal supervisory observations from MRAs. An observation does not itself create an expectation for board presentation or corrective action. Other violations can still require remediation. The classification of a communication is therefore important, but a less severe label does not repeal the underlying law. [3]
Recommended issue management records the legal basis, communication type, relevant facts, management response and remaining financial exposure. Preserve disagreements accurately. Do not translate every suggestion into an identical board-level requirement, and do not delete an acknowledged legal violation because it was not called an MRA.
Worked example: process weakness versus a loss mechanism
Illustrative example A: a credit policy contains an outdated committee name, but authority, approvals and decision logs function correctly. The document should be corrected. Without additional facts, it is difficult to show how that error materially harms financial condition.
Illustrative example B: an automated limit-increase program omits recent delinquency information for $200 million of accounts, has no independent validation and continues to expand exposure. A scenario of only 1% additional loss equals $2 million. Whether that is material depends on the institution and evidence, but the mechanism is identifiable. The analysis should establish likelihood and exposure rather than treating the scenario itself as proof.
Example C: a practice violates an applicable banking law even though the bank has not quantified a material balance-sheet loss. The separate legal-violation basis for an MRA matters. Financial materiality is not a universal defense to noncompliance.
What changes in the supervisory conversation
The agencies describe the reform as focusing supervision on material financial risks and providing clearer standards. [1] The strongest benefit would be more precise findings and remediation proportional to risk. A bank can respond with loss scenarios, control testing and evidence rather than debating abstract expectations.
The countervailing concern is that a narrow reading could delay action until weak controls have produced visible damage. My assessment is that this risk is best addressed through credible forward-looking evidence: leading indicators, repeated exceptions, failed controls and concentration. Management need not wait for the legal threshold for enforcement before correcting a problem.
Avoid inventing a universal dollar cutoff. The final framework explicitly contemplates tailoring. A $2 million exposure can mean different things at institutions with different capital, earnings and operating complexity. Several small weaknesses may also interact to produce a larger risk.
Preparation before November 2
Recommended preparation is a legal and risk review of how the institution classifies supervisory communications, tracks remediation and explains financial effects. Retain existing commitments and orders unless the responsible authority changes them. An internal decision to relabel an issue does not modify an enforceable obligation.
Train first-line managers to distinguish correcting a control from challenging the legal basis of a finding. Both can proceed with a clear record. Independent validation should test whether risk actually declined, while the legal team handles interpretation and procedural questions.
Measure remediation quality through residual exposure, recurrence and reliable reporting. A lower count of MRAs is not necessarily an improvement if the same operational weaknesses remain and simply appear under another label.
What would warrant a revision
Monitor the November effective date, authoritative corrections, implementation materials and any judicial decisions changing the framework. Update this article if the Fed adopts a corresponding standard or if subsequent interpretation changes the distinction among enforcement, MRAs and observations.
The credit thesis is procedural clarity with continued responsibility for prudent lending. Evidence of more consistent findings and earlier correction would support the reform’s stated objective. Evidence that meaningful risks remain unaddressed because they lack an immediately visible loss would argue for a more cautious assessment.