The Exam Findings Are Sorted. Which Ones to Fix Is Still on the Chief Risk Officer's Desk.

On September 1, 2026, the OCC and the FDIC published a final rule, Unsafe or Unsound Practices, Matters Requiring Attention, effective November 2, 2026. Under the rule, each agency "may only issue a matter requiring attention" for practices that are contrary to generally accepted standards of prudent operation and that have materially harmed, or could reasonably be expected to materially harm, the bank's financial condition or present a material risk of loss to the Deposit Insurance Fund, or for an actual violation of a banking or banking-related law or regulation.

Below that line sit supervisory observations, which the rule defines as "an informal observation that does not rise to the level of a matter requiring attention". The rule states that a supervisory observation "does not create a requirement or supervisory expectation that the supervisory observation will be presented to the institution's board of directors or that the institution will take corrective action in response to the supervisory observation."

In the preamble, the agencies write: "It is critical that institutions, and not the agencies, exercise their own judgment on whether, when, and how to enhance their policies, practices, condition, or operations, unless otherwise required by an MRA or an enforcement action."

Hypothetical: a regional bank's issues management team has gone through every open item from its last two exams. A few are matters requiring attention, and those stay open. The rest are softer examiner suggestions, closer to what the rule now calls supervisory observations.

For each one, the team has written up the finding, the work done, the cost to finish and a recommendation: finish it, fold it into normal work, or close it with reasons. The call on which items still go to the board risk committee belongs to the chief risk officer. She has the file. She is also running the capital plan, and the risk committee meets in December.

The file is ready. The person who can release it is not.

Until she decides, every item stays on the tracker and in every status meeting. Teams keep working on fixes the bank may decide it does not need, while the work that matters for financial condition competes for the same people.

The chief risk officer gets one packet: each item, its source, its status, the recommendation and the reasoning, with the matters requiring attention separated from everything else.

She reviews it in an afternoon, agrees with most recommendations, moves two items back to active remediation, and records why. The risk committee gets a short list of what the bank chose to fix, what it chose not to, and who decided.

WisdomTwin.ai is building a sovereign judgment layer for regulated enterprises. It is designed to give each named approver a role-specific judgment twin that prepares the decision packet the way that person reviews, with the evidence attached, so the decision moves faster and leaves an auditable record. It is designed to run on-premises, on-device or in your private cloud, and the named person still makes the call.

We don't replace judgment. We remove the wait.

Examples in this issue are hypothetical, and nothing here describes a customer result.

We're hosting WisdomTwin Live, a session on the true cost of meetings: the money, the slow decisions and the toll on the people sitting in them. Prefer a one-on-one conversation first? Book a call: https://calendly.com/romanbodnarchuk

Want in? Comment two words: No Meetings. We'll invite you to the next WisdomTwin Live, or send you the replay if you miss it.

Roman Bodnarchuk
Co-Founder and CEO, WisdomTwin.ai