An FDIC consumer compliance examination is one of the most consequential events in a community bank's calendar. The outcome — a satisfactory rating or a finding-laden report with MRAs — affects your supervisory relationship for the next examination cycle, your ability to pursue new products and acquisitions, and in severe cases, your standing with the Board and your regulators.

The banks that consistently receive strong examination results aren't necessarily the ones with the largest compliance teams. They're the ones that prepare systematically. This 90-day checklist gives compliance officers a practical framework for examination readiness.

Understanding What FDIC Examiners Focus On

FDIC consumer compliance exams assess your bank's compliance with federal consumer protection laws and regulations, fair lending requirements, and Community Reinvestment Act obligations. Examiners use a risk-based approach — banks with more complex products, rapid growth, or prior findings receive more scrutiny.

The most common finding areas in recent FDIC examinations include:

The 90-Day Preparation Checklist

90 Days Out
Policy Review & Gap Analysis
Inventory all policy documents — deposit agreements, lending disclosures, vendor management policy, BSA/AML program, privacy notice. Note last revision date for each.
Run a regulatory gap analysis — compare each document against current CFR requirements, OCC/FDIC/Fed bulletins issued since last revision. Flag discrepancies with specific regulatory citations.
Review prior examination findings — ensure every MRA from the last exam has been fully remediated with documented evidence. Examiners will check.
Assess CRA performance — review lending activity, community development investments, and service delivery against your assessment area demographics.
Evaluate fair lending risk — pull HMDA data, review pricing exceptions, assess underwriting consistency across protected classes.
BSA/AML program review — assess customer risk rating methodology, transaction monitoring thresholds, SAR filing patterns, and beneficial ownership procedures.
60 Days Out
Remediation & Documentation
Remediate high-priority gaps — prioritize findings with highest MRA risk. Update policy documents, obtain Board approval where required.
Update vendor management documentation — ensure critical third-party relationships have current risk assessments consistent with OCC Bulletin 2023-17 / FDIC FIL-29-2024.
Verify training completion — ensure all relevant staff have completed annual compliance training. Pull completion records from your LMS.
Organize examination workpapers — begin assembling the document request package. FDIC typically requests 2-3 years of policies, Board minutes referencing compliance, audit reports, and complaint logs.
Brief senior management and Board — prepare a pre-exam status briefing. Examiners will interview management; they should be prepared to speak to compliance structure, risk appetite, and recent changes.
Review complaint management — audit your complaint log for patterns. Unresolved or poorly-documented complaints are a leading indicator of UDAP/UDAAP findings.
30 Days Out
Final Prep & Logistics
Complete document package — finalize and organize all requested documents. Label clearly with exam request item numbers. Designate a single point of contact for examiner requests.
Prepare examination room — designate a private, adequately resourced workspace for examiners. Provide system access as requested.
Brief department heads — operations, lending, IT, and branch managers should understand their role. Instruct staff to be cooperative and factual; never speculate or volunteer information beyond what's asked.
Prepare your self-assessment narrative — a brief written summary of your compliance program, recent improvements, and any areas you've proactively identified and are remediating demonstrates strong compliance culture.
Review open audit issues — internal audit findings that aren't fully remediated will likely be flagged. Have a clear status and timeline for each open item.

What to Do When Examiners Identify an Issue During the Exam

Even with thorough preparation, examiners sometimes identify issues you missed. How you respond in the moment matters. If an examiner raises a concern, resist the urge to immediately defend or deflect. Instead:

  1. Ask for clarification on the specific regulatory citation underlying their concern
  2. Acknowledge you'll review the issue and respond promptly
  3. Conduct a rapid internal assessment — often within 24 to 48 hours
  4. If the concern is valid, proactively communicate your remediation plan before the exit meeting

Banks that surface their own findings during an examination — even ones the examiner hasn't flagged yet — consistently receive more favorable treatment. It demonstrates a culture of compliance that examiners weight heavily in their overall assessment.

Pro tip: Run a RegentForge gap analysis in the weeks before your examination. For the cost of a few hours of consulting time, you get a complete picture of your regulatory exposure with specific CFR citations — the same framework examiners use. Findings you identify and remediate proactively become demonstrations of your compliance culture, not MRAs.

After the Examination: Exit Meeting and Response

The exit meeting is your opportunity to clarify findings before they're finalized. Come prepared with specific factual corrections if the examiner has mischaracterized any aspect of your operations or policies. Do not dispute findings in a confrontational way — but do ensure the record is accurate.

Once you receive the examination report, your written response to any MRAs is critical. Structure each response with: acknowledgment of the finding, root cause analysis, specific corrective actions with named owners and deadlines, and a validation/monitoring plan. See our complete MRA response guide for detailed guidance.


Know Your Gaps Before Examiners Do

RegentForge runs your bank's policies against 18,000+ regulatory documents in 48 hours — delivering the same gap analysis framework examiners use, before they arrive.

Request a Free Demo