Federal Financial Institutions Examination Council

Overview

Overview: The Federal Financial Institutions Examination Council (FFIEC) is an interagency coordinating body that establishes uniform principles, standards, and report forms for the federal examination of financial institutions. Founded in 1979, it serves as a critical standardization and coordination mechanism across the five primary federal banking regulators.

Basic Identity

Classification

Inclusion Justification

What This Entity Oversees

1. Organizational Identity & Authority

Official Designation

The Federal Financial Institutions Examination Council is a formal interagency body established under Title X of the Financial Institutions Regulatory and Interest Rate Control Act of 1978 (FIRA). It was formally created on March 10, 1979, following Congressional directive to enhance uniformity and cooperation among federal banking regulators.

Entity Classification

• Type: Coordination / Oversight Body (Layer 5 — Advisory & Coordination Body)
• Legal Authority Level: Influential (establishes standards without direct regulatory authority)
• Jurisdiction: Federal (United States)
• Founding Year: 1979

Primary Mission

The FFIEC's actions are focused on promoting consistency in examination activities across federal banking regulators. Specifically, the Council:

1. Prescribes uniform principles, standards, and report forms for the federal examination of financial institutions
2. Makes recommendations to promote uniformity in supervision and examination
3. Facilitates public access to data that depository institutions must disclose under the Home Mortgage Disclosure Act of 1975
4. Coordinates examination guidance to reduce regulatory burden and inconsistency

Critical Note: The FFIEC does not directly regulate financial institutions. Rather, it functions as a coordination and standardization body that harmonizes the regulatory approach of its five member agencies.

3. Legal & Regulatory Authority

Foundational Legislative Authority

Statute: Financial Institutions Regulatory and Interest Rate Control Act of 1978, Title X (15 U.S.C. § 1867)

Key Authority Provisions:

• Directs member agencies to "prescribe uniform principles and standards and report forms for the federal examination of insured depository institutions"
• Requires the Council to "promote uniformity" in supervision and examination practices
• Mandates public disclosure coordination under the Home Mortgage Disclosure Act

Scope of Authority:

The FFIEC's authority extends to prescribing uniform standards for the examination of:

• Commercial banks (national and state-chartered)
• Savings institutions (federal and state-chartered)
• Credit unions (federal and state-chartered)
• Federal branches and agencies of foreign banks

Regulatory Reach

Supervised Population: Approximately 4,700+ federally supervised depository institutions in the United States

Examination Coverage:

• All national banks (OCC-supervised)
• State member banks (Federal Reserve-supervised)
• FDIC-insured state non-member banks (FDIC-supervised)
• Federal credit unions (NCUA-supervised)
• Institutions subject to CFPB consumer protection authority

Authority Limitations

The FFIEC operates as a recommendation and coordination body, not a direct regulator:

• Cannot directly examine institutions
• Cannot directly enforce compliance
• Issues standards that member agencies adopt and enforce through their respective authorities
• Cannot override individual agency examination determinations
• Functions as "first among equals" in promoting uniformity

4. Core Products & Regulatory Outputs

4.1 Uniform Reporting Systems

Call Reports (FFIEC Uniform Call Report)

• Description: Quarterly financial reports filed by all depository institutions
• Components: Consolidated reports of condition and income (FFIEC 031, 041, 051)
• Data Elements: Balance sheet, income statement, off-balance-sheet activities, regulatory capital
• Filing: Quarterly within 30-45 days of quarter-end
• Use: Supervisory monitoring, public disclosure, safety and soundness assessment
• Repository: FFIEC Central Data Repository

Uniform Bank Performance Report (UBPR)

• Description: Analytical tool for supervisory and examination purposes
• Frequency: Published quarterly, within one day of Call Report filing
• Content: Comparative metrics showing bank performance against peer group averages
• Sections: Earnings, balance sheet composition, asset quality, liquidity, capital adequacy
• Target Audience: Federal and state banking supervisors, bankers, analysts
• Access: FFIEC Public Data Distribution (PDI)

UBPR Highlights:

• Calculates peer group averages and percentile rankings
• Compares individual bank performance to historical trends
• Provides benchmarking data for over 5,000+ banks
• Identifies outlier performance for supervisory attention

4.2 Consumer Disclosure & Fair Lending Coordination

Home Mortgage Disclosure Act (HMDA) Data & Guidance

• Authority: FFIEC coordinates HMDA implementation across member agencies
• Data Collected: Loan-level information on mortgage applications and originations
• Required Disclosures: Applicant demographics, loan terms, pricing, action taken
• Annual Publication: Public HMDA datasets and analysis reports
• Portal: CFPB HMDA Data Portal
• Purpose: Fair lending compliance monitoring, Community Reinvestment Act evaluation, housing market analysis

Community Reinvestment Act (CRA) Examination Procedures

• Coordination Role: FFIEC issues uniform examination procedures for CRA compliance assessment
• Evaluation Criteria: Assessment areas, community development activities, service equity
• Member Agency Alignment: OCC, Federal Reserve, FDIC issue substantially similar CRA examination procedures
• Connection to HMDA: CRA evaluators use HMDA data to assess fair lending and service delivery

4.3 Compliance & Risk Management Standards

Bank Secrecy Act / Anti-Money Laundering (BSA/AML) Examination Manual

Scope: Comprehensive examination guidance for federal and state examiners

Content Modules:

• Customer Due Diligence (CDD) and Know Your Customer (KYC)
• Beneficial ownership identification and verification
• Transaction monitoring and suspicious activity reporting
• Correspondent banking due diligence
• Sanctions compliance screening
• Wire transfer information requirements
• Special information sharing procedures

Updates: Regularly revised to reflect regulatory changes (most recent updates: 2020-2024)

Access: FFIEC BSA/AML InfoBase

Examination Procedures: FFIEC BSA/AML Examination Procedures

Information Technology (IT) Examination Handbook

Portal: FFIEC IT Examination Handbook InfoBase

Booklets (Standardized Curriculum):

1. Supervision of Technology Service Providers
2. Business Continuity Planning
3. Network Security
4. Internet Banking
5. E-Authentication (including emerging technologies like API security)
6. Development, Acquisition, and Maintenance (DA&M) — Updated August 2024
7. Architecture, Infrastructure, and Operations
8. Cryptography (including post-quantum cryptography considerations)
9. Retail Payment Systems
10. Wholesale Payment Systems

2024 Updates: The FFIEC released an updated Development, Acquisition, and Maintenance booklet (August 2024) addressing system development lifecycle, supply chain risk, and technology resilience.

4.4 Examination Guidance & Standards

Uniform Examination Guidelines & Procedures

• Supervisory guidance issued jointly or through FFIEC consensus
• Topics include: commercial lending, consumer lending, asset quality standards, capital assessment
• Published in Supervision and Regulation Letters (SRs) from member agencies
• Applies consistently across federal banking regulators

Interagency Examination Manuals

FFIEC coordinates and harmonizes examination manuals covering:

• Commercial real estate lending
• Construction lending
• Consumer compliance (fair lending, TILA, FCRA, etc.)
• Operational risk
• Appraisal and valuation standards

5.1 Institutions Under FFIEC Coordination

Population: Approximately 4,700+ federally supervised depository institutions

Institution Types:

1. National Banks (OCC jurisdiction)

• ~4,600 institutions, ~$12+ trillion in assets

1. State Member Banks (Federal Reserve jurisdiction)

• ~900 institutions, ~$7+ trillion in assets

1. FDIC-Insured State Non-Member Banks (FDIC jurisdiction)

• ~3,700 institutions, ~$2+ trillion in assets

1. Federal Credit Unions (NCUA jurisdiction)

• ~3,500 institutions, ~$1.5+ trillion in assets

1. Federal Branches of Foreign Banks (OCC jurisdiction)

• ~90 branches

1. Institutions Subject to CFPB Authority (CFPB jurisdiction)

• Mortgage originators, student loan servicers, payday lenders, prepaid card issuers

Total Assets Under Coordination: $25+ trillion

5.2 Examination Principles

Core Principles (FFIEC-Coordinated):

1. Risk-Based Supervision: Examination intensity scaled to institution risk profile
2. Forward-Looking Assessment: Identification of emerging risks and vulnerabilities
3. Uniform Standards: Consistent application of examination procedures across member agencies
4. Proportionality: Examination scope appropriate to institution size, complexity, and risk
5. Transparency: Clear communication of examination expectations

Examination Frequency:

• Large banks and complex institutions: Continuous or quarterly
• Smaller banks: Annual or biennial (based on risk assessment)
• Credit unions: Annual or biennial (based on asset size and condition)

5.3 Regulatory Focus Areas

6. Key Regulatory Guidance & Positions

6.1 Recent Guidance (2024-2025)

FFIEC Statement on Examination Principles Related to Valuation (February 2024)

• Principles for consistent valuation practices across examination
• Focus on appraisal independence and quality
• Alignment with Fair Lending examination approach

IT Development, Acquisition, and Maintenance Updated Guidance (August 2024)

• Comprehensive update to IT examination standards
• Emphasis on supply chain risk management
• System development lifecycle controls
• Software maintenance and patch management

HMDA Reporting Guidance: "A Guide to HMDA Reporting: Getting It Right!" (2024)

• Enhanced reporting accuracy requirements
• Data validation and quality standards
• Assistance for institutions implementing HMDA changes

6.2 Interagency Statements & Policy Positions

The FFIEC issues joint statements on:

• Financial stability risks
• Supervisory priorities (annual)
• Consumer protection focus areas
• Technology risk management expectations
• Fair lending and CRA examination positions

7. Data Management & Public Access

7.1 FFIEC Central Data Repository (CDR)

Portal: FFIEC CDR - Public Data Distribution

Data Available for Public Access:

• Call Report data (current and historical)
• Uniform Bank Performance Reports
• HMDA data (loan-level and aggregated)
• Institution directory and characteristics
• Failure and enforcement action history

Data Frequency: Quarterly updates (quarterly Call Reports within 30-45 days of quarter-end)

Users:

• Regulators and examiners
• Bank management and investors
• Academic researchers
• General public (open access)

7.2 HMDA Data Portal

Portal: CFPB HMDA Data Hub

Available Data:

• Loan-level HMDA data (with privacy protections)
• Aggregated HMDA reports by lender and geographic area
• Trends analysis and statistical reporting
• Interactive tools for compliance and market analysis

Coverage: Approximately 5,000+ financial institutions

10. Examination Procedures & Standards

10.1 Examination Authority & Scope

Federal Examination Authority:

• Each member agency conducts examinations within its supervisory jurisdiction
• FFIEC establishes uniform principles and procedures to be applied
• Examination authority spans: financial condition, operational risk, regulatory compliance, consumer protection

Risk-Based Examination:

• Tailored to institution's risk profile
• Large institutions: Continuous supervision, quarterly examinations
• Community banks: Annual or biennial examinations
• Examination intensity adjusted based on: size, complexity, risk areas identified

10.2 Key Examination Focus Areas

Safety & Soundness:

• Capital adequacy assessment
• Liquidity and asset-liability management
• Credit risk (loan portfolio quality)
• Operational risk (IT, business continuity, cybersecurity)
• Market risk and interest rate risk
• Earnings and profitability

Regulatory Compliance:

• Anti-Money Laundering (BSA/AML)
• Sanctions compliance
• Fair lending and civil rights
• Disclosure compliance (HMDA, CRA)
• Consumer protection (TILA, FCRA, TCPA, etc.)
• Data protection and privacy

Risk Management:

• Governance and board oversight
• Risk management framework
• Information technology and cybersecurity
• Operational resilience
• Third-party risk (service providers, vendors)

10.3 Report of Examination (ROE)

Each member agency issues a Report of Examination (ROE) following examination:

• Findings on capital, asset quality, management, earnings, liquidity
• Compliance assessment
• CAMELS or similar rating
• Corrective action recommendations
• Follow-up timeline

FFIEC's Role: Establishes uniform structure and terminology for ROE consistency

11. Consumer & Fair Lending Oversight

11.1 Fair Lending Coordination

FFIEC Fair Lending Role:

• Establishes uniform fair lending examination procedures
• Coordinates across all member agencies
• Aligned approach to fair lending risk assessment
• Statistical testing methodologies and thresholds

Compliance Areas:

• Disparate impact analysis in lending decisions
• Pricing discrimination
• Pattern or practice violations
• Service equity and product availability

11.2 Community Reinvestment Act (CRA)

FFIEC Coordination:

• Issues uniform CRA examination procedures
• Member agencies apply similar evaluation methodology
• Public Notice requirements
• Performance context considerations

Evaluation Components:

• Lending test (community lending activity)
• Investment test (community development investments)
• Service test (branch presence, services to low-income areas)

Data Source: FFIEC coordinates HMDA data use for CRA performance evaluation

12. Technology & Cybersecurity Oversight

12.1 IT Examination Standards (FFIEC InfoBase)

Comprehensive IT Coverage:

The FFIEC IT Examination Handbook InfoBase provides standardized guidance covering:

1. System Development Lifecycle (SDLC)

• Requirements management
• Design and development controls
• Testing and quality assurance
• Deployment and maintenance

1. Infrastructure & Operations

• Data center operations and resilience
• Network infrastructure and security
• Cloud computing and third-party services
• Incident response and disaster recovery

1. Application Security

• API security and integration
• Web application security
• Database security
• Cryptography and encryption

1. Business Continuity & Resilience

• Business continuity planning
• Disaster recovery planning
• Testing and recovery time objectives
• Pandemic and crisis preparedness

1. Emerging Technologies

• Artificial intelligence and machine learning
• Blockchain and distributed ledgers
• Post-quantum cryptography
• Open banking and API security

12.2 Cybersecurity Examination Approach

Risk-Based Framework:

• Tailored to institution size, complexity, interconnectedness
• Continuous monitoring for larger institutions
• Assessment of controls over sensitive data
• Vendor risk management evaluation

Key Risk Areas:

• External cyber threats
• Ransomware and extortion
• Data breaches and theft
• Business email compromise
• Insider threats

14. Related & Connected Entities

14.1 Member Agencies (Primary Coordination)

• Federal Reserve Board of Governors (https://www.federalreserve.gov/)
• Federal Deposit Insurance Corporation (https://www.fdic.gov/)
• Office of the Comptroller of the Currency (https://www.occ.treas.gov/)
• National Credit Union Administration (https://www.ncua.gov/)
• Consumer Financial Protection Bureau (https://www.consumerfinance.gov/)

14.2 State Liaison

• State banking regulators (coordinated through rotating State Liaison Committee representation)
• Conference of State Bank Supervisors (CSBS)

14.3 International Coordination

• Basel Committee on Banking Supervision (BCBS)
• Financial Stability Board (FSB)
• International Organization of Securities Commissions (IOSCO)

15. Quick Reference & Key Facts

FFIEC At-a-Glance

Key Products & Deliverables

1. Call Reports — Quarterly financial reporting system
2. UBPR — Uniform Bank Performance Report (comparative analytics)
3. HMDA Data & Guidance — Mortgage disclosure and fair lending data
4. CRA Examination Procedures — Community Reinvestment Act evaluation procedures
5. BSA/AML Manual — Bank Secrecy Act and Anti-Money Laundering examination manual
6. IT Handbook — Comprehensive information technology examination guidance
7. Uniform Examination Guidelines — Supervisory standards across member agencies
8. Report Forms — Standardized regulatory reporting forms (FFICs, FRY-9LP, etc.)
9. Supervisory Guidance — Interagency statements and policy notices
10. Training Materials — Examiner training and professional development resources

Regulatory Reach Summary

Direct Oversight Coordination:

• 4,700+ federally supervised depository institutions
• $25+ trillion in assets
• All national banks, federal credit unions, state member banks, FDIC-insured state non-member banks
• Federal branches of foreign banks
• CFPB-supervised non-bank financial institutions

Indirect Influence (State Coordination):

• State-chartered banks and credit unions (through state regulators)
• State Liaison Committee provides state regulator participation in standard-setting

Regulatory Powers

This entity exercises integrated regulatory powers across multiple financial sectors:

Regulatory Role and Function

Council Composition

The FFIEC consists of six voting members:

Advisory Structure

The State Liaison Committee (SLC) provides a direct connection to state-level banking supervisors, ensuring state examination perspectives inform federal uniform standards.

Headquarters & Operations

• Primary Location: Washington, District of Columbia
• Operational Model: Interagency coordination through committee structure
• Decision-Making: Consensus-based on key policy matters

8.1 Governance Structure

Decision-Making Body: FFIEC Council (six voting members)

Operational Committees:

1. Supervision Committee — Examination standards and procedures
2. Technology Committee — IT examination guidance
3. Consumer Compliance Committee — Fair lending and consumer protection
4. Data Committee — Call Report and data standards
5. Training Committee — Examiner training and professional development

Meeting Schedule: Typically quarterly plenary sessions; committee meetings as needed

8.2 Consensus and Authority

• Voting: Decisions require consensus (all members in agreement)
• Dissent: Any member agency may decline to adopt FFIEC standards but typically does so within own regulatory authority
• Enforcement: Each member agency enforces FFIEC standards through its own supervisory authority

8.3 Staffing & Operations

• Permanent Staff: Headquarters-based coordinating staff
• Examiner Participation: Member agency examiners participate in training, guidance development
• Regional Presence: No direct regional offices; coordinates through member agencies' 12 Federal Reserve Districts

Legal Foundation

Established by primary legislation enacted by the national legislature. The enabling statute defines the regulatory mandate, scope of authority, governance structure, and enforcement powers. The entity was established in 1979.

Licensing and Authorization Relevance

The YAML Front Matter - All ~50 Metadata Fields issues authorizations within its regulatory mandate in United States:

[Specific license types and requirements require verification from official sources]

Payments and Money Movement Relevance

The YAML Front Matter - All ~50 Metadata Fields has the following relevance to payments and money movement in United States:

Payment Systems Governed or Overseen

The YAML Front Matter - All ~50 Metadata Fields does not directly operate payment systems. Its payment-related role includes:

Money transmitters, payment processors, and fintech companies operating in this jurisdiction require licensing or registration with this entity.

Relationship to Other Regulators

9.1 Member Agencies

The FFIEC brings together the five federal banking regulators:

1. Federal Reserve Board of Governors

• Supervises: Bank holding companies, state member banks, financial holding companies
• Authority: Federal Reserve Act, Banking Act of 1935

1. Federal Deposit Insurance Corporation (FDIC)

• Supervises: State-chartered non-member banks, savings banks
• Authority: FDIC Act, Federal Deposit Insurance Act

1. Office of the Comptroller of the Currency (OCC)

• Supervises: National banks, federal branches and agencies of foreign banks
• Authority: National Bank Act, Bank Holding Company Act

1. National Credit Union Administration (NCUA)

• Supervises: Federal credit unions, federal credit union branches
• Authority: Federal Credit Union Act

1. Consumer Financial Protection Bureau (CFPB)

• Supervises: Mortgage originators, student loan servicers, non-bank financial entities
• Authority: Dodd-Frank Act, Title X

9.2 State Coordination

State Liaison Committee (SLC):

• Represents five state banking supervisors (rotating membership)
• Participates in FFIEC standard-setting
• Provides state perspective on supervisory issues
• Chair serves as sixth voting member

Dual Supervision:

• Many banks operate under both federal and state charters
• FFIEC standards apply to federal supervisors; states may adopt similar standards
• Regular coordination on examination procedures

9.3 International Coordination

• Participation in Basel Committee on Banking Supervision (BCBS)
• FFIEC standards influence international banking standards
• Member agencies coordinate with foreign regulators through bilateral and multilateral arrangements

Geography and Jurisdiction Notes

Important Departments and Divisions

Key Public Resources

Notes on Naming and Language