Why Tracking OCC and FDIC Joint Guidance Requires More Than a Newsletter

Editorial illustration representing OCC and FDIC joint regulatory guidance documentation

The OCC and FDIC each publish through their own channels, on their own schedules, using their own document taxonomies. When they issue guidance jointly — alongside the Federal Reserve or other interagency partners — that document does not automatically surface in a form that commercial banks with dual-charter exposure can efficiently track. Understanding why requires understanding how the interagency publication process actually works, and where monitoring infrastructure typically breaks down.

Commercial banks chartered under the national bank charter are supervised primarily by the OCC, which publishes guidance through OCC Bulletins, Comptroller's Handbook updates, and interpretive letters. Banks with state charters that are members of the Federal Reserve System are supervised by the Fed; those that are FDIC-supervised have a different set of primary channels. Bank holding companies face the Federal Reserve's supervision regardless of the subsidiary bank's charter. A mid-size banking organization with a national bank subsidiary and a holding company structure is, in practice, tracking OCC and Federal Reserve guidance channels simultaneously — and if that holding company operates any state-chartered entities, FDIC channels enter the picture as well.

How Interagency Documents Are Published

When the OCC, FDIC, Federal Reserve, and NCUA issue guidance jointly — as they did with the interagency guidelines on third-party risk management finalized in 2023 — the document appears in the Federal Register and is simultaneously published on each participating agency's website as a corresponding bulletin or letter. The OCC issues it as an OCC Bulletin. The FDIC issues it as an FIL (Financial Institution Letter). The Federal Reserve issues it as an SR Letter (Supervision and Regulation). These are not identical documents, though they reference the same underlying guidance. Each agency version may carry agency-specific framing, different subject line language, and different distribution scope.

A compliance team monitoring only OCC Bulletins will capture the OCC's issuance. But if the compliance function needs to understand how the Federal Reserve's supervisory expectations differ from the OCC's framing — which matters for holding company compliance programs — they need the SR Letter as well. A newsletter that aggregates financial regulatory headlines may mention the joint guidance once when it appears in the Federal Register. It will not track the subsequent agency-specific companion issuances, the informal FAQs that agencies sometimes publish alongside joint guidance, or the speech transcripts in which agency officials clarify application scope.

The Specific Challenge of Dual-Charter Exposure

Consider a commercial bank holding company that owns a national bank and has recently acquired a smaller state-chartered bank. The holding company's Chief Compliance Officer needs to maintain a monitoring program that captures OCC guidance for the national bank subsidiary, FDIC guidance for the acquired state bank (assuming non-member status), and Federal Reserve guidance at the holding company level. Interagency documents issued by all three agencies need to be captured once and mapped to both charters, not tracked three times as separate items.

This mapping problem is where undifferentiated newsletter monitoring breaks down. When the 2024 interagency guidance on alternative data in consumer credit underwriting was issued by the OCC, FDIC, Federal Reserve, CFPB, and NCUA, it arrived across five agency channels in the same week. A compliance team relying on weekly digest emails received five separate mentions of what was effectively one regulatory action — without a clear framework for recognizing them as related or for assigning a single ownership and response track within their compliance program.

We are not saying newsletters and digest services have no value for general awareness. What they cannot provide is the structured deduplication and cross-agency mapping that a multi-charter compliance program requires. That function requires monitoring infrastructure that understands the relationship between an OCC Bulletin and its FDIC FIL counterpart, flags them as a single regulatory action, and routes them to the compliance owner responsible for both subsidiary programs. Our coverage framework tracks all three principal federal banking agency channels with this coordination in mind.

What Monitoring Gaps Actually Look Like in Examination

Bank examiners — OCC and FDIC alike — assess compliance management systems during safety-and-soundness examinations. A component of that assessment is whether the institution demonstrates awareness of applicable guidance and can show how it incorporated new regulatory expectations into its program. An institution that received the joint third-party risk management guidance in 2023 and cannot document how it assessed that guidance against its vendor management program will face scrutiny, regardless of whether the underlying vendor management program is actually adequate.

The documentation burden here is meaningful. Examiners increasingly ask compliance functions to produce evidence of their monitoring process — not just the policies that resulted from it. A compliance team that can demonstrate it received, classified, and assessed a regulatory document within a defined timeframe is in a qualitatively different position from one that says "we saw it eventually" during the examination cycle.

A mid-size state-chartered bank operating under FDIC supervision — with a holding company relationship to a Federal Reserve-regulated entity — encountered precisely this dynamic during a routine safety-and-soundness examination in early 2024. The examination team asked for documentation of the institution's monitoring process for interagency guidance. The institution had acted on the guidance in question; the issue was that its process documentation was incomplete, and examiners characterized this as a compliance management system weakness. The remedy was not to change any substantive compliance control — it was to build a more structured monitoring and documentation process.

Practical Requirements for Interagency Monitoring

A monitoring approach that serves commercial banks with dual-charter or multi-agency exposure needs to do several things that general-purpose newsletters do not. It needs to track each agency's primary publication channels independently while recognizing when documents from different agencies reference the same regulatory action. It needs to distinguish between a standalone OCC Bulletin and the OCC-specific portion of a five-agency interagency statement — these require different triage responses. And it needs to capture the informal channels — agency speeches, examination procedure updates, FAQ releases — where application scope is often clarified outside the formal publication record.

The obligation type classification dimension matters here as well. Interagency guidance does not have the same legal status as a final rule codified in 12 CFR, but it carries supervisory weight that compliance teams must account for. A monitoring system that classifies all regulatory documents identically cannot help a compliance officer prioritize a final rule that requires policy revision within 90 days against interagency guidance that requires assessment but not necessarily a formal program change. Review how Ruleward structures obligation type classification to support this kind of prioritization. For a deeper look at the challenge of classifying different document types correctly, see our analysis in Regulatory Obligation Classification: Why the Taxonomy Matters.

← Back to Regulatory Insights