Level 1
What is the name of the regulator that performs audits (which are called EXAMS) on Banks.
Federal Deposit Insurance Corporation
What is the formal name of the Exam for Credit Unions?
NCUA Risk‑Focused Examination
This document is the Primary Source of Cyber and IT Risk Examination Standards for Banks
FFIEC IT HANDBOOK
Does the VP of IT, CTO, CIO, CISO know about every MRA / DOR on every single bank or credit union exam?
Yes - they are required to know about all of them, and often sign off on due dates / review resolutions.
Do Exams happen in person or virtually?
Both, but almost never 100% virtual. Usually hybrid?
What is the name of the regulator that performs audits on credit unions?
National Credit Union Administration
Regulator Portal for Document Submission & Exam Interaction thanks banks or credit unions log into for Banks
FDICconnect
This document is the Primary Source of Cyber and IT Risk Examination Standards for Credit Unions
FFIEC IT HANDBOOK
Does the Board of Directors know of every single MRA / DOR on an exam ?
Highly likely, maybe not all MRAs, but anything mission critical and final results, exam scores, are included in board meetings.
Where can you find this information?
IN the visualizer on the FY26 Bank Sheet.
When a bank has a regulator come in for their annual Exam they call it their annual "XYZ EXAM"
BANK exam
FDCI Exam
Regulator Portal for Document Submission & Exam Interaction for Credit Unions
MERIT Software
When an examiner finds a RED FLAG on an issue for a BANK they call it a .............
MRA = Matters Requiring Attention
What is a 30-60-90 day IT fire Drill that the Opentext Cyber Team talks about so much?
Its when a bank or a credit union has an issue on an exam that creates a MRA, or DOR, and the examiner assigns a due date for them to go fix it or be penalized.
CAMELS - ( Capital, Asset quality, Management, Earnings, Liquidity, Sensitivity to market risk)
When a Credit Unions has a regulator come in for their annual Exam they call it their annual "XYZ EXAM"
NCUA Exam
When an examiner comes into your office at a Bank with his checklist to go over for the exam his checklist is called what?
InTrex Guidelines
When an examiner finds a RED FLAG on an issue for a BANK but they want the board of directors to specifically fix it because its very intense they call it a.....
MRBA = Matters requiring board attention
Who gets MRAs, and who gets DORS?
Plus what are they?
Plus what do they stand for?
Banks get MRAs, and Credit Unions Get Dors.
Matters requiring attention, and documents of resolution.
1-5 with 1 being the best.
1-2 considered good.
3-5 considered bad.
What is the formal name of the Exam for banks?
FDIC Safety and Soundness Examination
When an examiner comes into your office at a Credit Union with his checklist to go over for the exam his checklist is called what?
NCUA Examiners guide
When an examiner finds a RED FLAG on an issue for a Credit Union they call it a .............
Document of Resolution
How Frequent are Bank / Credit Union Exams
Every 12 months......
18 months if HIGH EXAM scores and under 1B in assets (which is about 50-200 employees)
What happens if you have a bad camels score?