Bank Regulatory Examination Preparation Checklist [FREE PDF]

Federal and state banking examiners conduct periodic reviews assessing compliance with BSA/AML, GLBA, Dodd-Frank, and FFIEC guidelines, with findings that can result in formal enforcement actions or significant monetary penalties. This checklist helps compliance officers and branch managers systematically prepare documentation, controls, and staff readiness prior to an examination. Completing this checklist reduces examination cycle time and demonstrates a proactive compliance culture to regulat

  • Industry: Banking
  • Frequency: Quarterly
  • Estimated Time: 90-120 minutes
  • Role: Compliance Officer
  • Total Items: 37
  • Compliance: BSA/AML - 31 CFR Part 1020, FFIEC IT Examination Handbook - Information Security Booklet, Dodd-Frank Act Section 1071, GLBA 15 U.S.C. § 6801-6809, SOX Section 404 - Internal Control Assessment

BSA/AML Program Readiness

Verify that the Bank Secrecy Act and Anti-Money Laundering program documentation, controls, and filings are current and accessible for examiner review.

  • Is the institution's BSA/AML compliance program documented and board-approved within the last 12 months?
  • Are all Currency Transaction Reports (CTRs) filed within the required 15-calendar-day window?
  • Are Suspicious Activity Reports (SARs) filed within 30 days of initial detection of suspicious activity?
  • Has an independent BSA/AML audit been completed within the past 12-18 months?
  • Are Customer Due Diligence (CDD) and Enhanced Due Diligence (EDD) records complete for all high-risk customers?
  • Please provide the total number of SARs filed in the past 12 months.

GLBA Privacy & Safeguards Compliance

Confirm that privacy notices, opt-out processes, and information security safeguards comply with Gramm-Leach-Bliley Act requirements.

  • Has the institution provided accurate annual privacy notices to all customers as required?
  • Is there a functioning opt-out mechanism for customers who wish to restrict information sharing with non-affiliated third parties?
  • Is a written Information Security Program in place that meets GLBA Safeguards Rule requirements?
  • Has a qualified individual been designated to oversee the information security program?
  • Have third-party service providers been assessed for GLBA-compliant data protection practices?

FFIEC IT & Cybersecurity Readiness

Assess the institution's IT governance, cybersecurity controls, and incident response preparedness against FFIEC IT Examination Handbook standards.

  • Has an IT risk assessment been completed and documented within the past 12 months?
  • Is a documented incident response plan in place and tested within the last 12 months?
  • Are multi-factor authentication (MFA) controls implemented for all critical systems and privileged accounts?
  • Have penetration tests or vulnerability assessments been conducted within the past 12 months?
  • Are vendor management procedures documented for all technology service providers?
  • What is the current FFIEC Cybersecurity Assessment Tool (CAT) maturity level assigned?

Dodd-Frank Consumer Protection Compliance

Review compliance with Dodd-Frank consumer financial protection provisions and CFPB regulatory requirements applicable to the institution.

  • Are all HMDA reportable loan data fields complete and accurate for the current reporting period?
  • Does the institution have documented policies prohibiting unfair, deceptive, or abusive acts or practices (UDAAP)?
  • Has the institution's complaint management system captured, tracked, and resolved all customer complaints within required timeframes?
  • Are mortgage servicing practices compliant with RESPA and Dodd-Frank mortgage servicing rules?
  • Is small business lending data collected and reported in compliance with Dodd-Frank Section 1071?

SOX Section 404 Internal Controls Assessment

Evaluate the design and operating effectiveness of internal controls over financial reporting for publicly traded banking institutions.

  • Has management completed its annual assessment of internal controls over financial reporting (ICFR)?
  • Has the external auditor attested to management's ICFR assessment as required for large accelerated filers?
  • Are all identified material weaknesses or significant deficiencies in internal controls documented and remediated?
  • Are access controls and segregation of duties enforced for all financial reporting systems?
  • Are change management controls documented for all updates to financial reporting systems?

CRA & Fair Lending Compliance

Confirm that Community Reinvestment Act obligations and fair lending requirements are met and documentation is examination-ready.

  • Is the institution's CRA Public File current, complete, and available for public inspection?
  • Has a fair lending risk assessment been completed within the past 12 months?
  • Are HMDA data used to monitor for potential disparate impact or disparate treatment in lending?
  • Are loan pricing exceptions documented with business justification and monitored for demographic patterns?
  • What is the institution's most recent CRA examination rating?

Staff Training & Documentation Readiness

Verify that compliance training records, policy acknowledgments, and examination documentation packages are complete and accessible.

  • Have all staff members completed required BSA/AML annual compliance training with documentation?
  • Are all compliance policies and procedures reviewed and updated within the past 12 months?
  • Is an examination readiness binder or digital package prepared with all anticipated examiner document requests?
  • Has the compliance management system (CMS) been reviewed and updated to reflect current regulatory requirements?
  • Please provide any additional examination preparation notes or outstanding documentation gaps.

Related Financial Services Banking Checklists

Why Use This Bank Regulatory Examination Preparation Checklist [FREE PDF]?

This bank regulatory examination preparation checklist [free pdf] helps banking teams maintain compliance and operational excellence. Designed for compliance officer professionals, this checklist covers 37 critical inspection points across 7 sections. Recommended frequency: quarterly.

Ensures compliance with BSA/AML - 31 CFR Part 1020, FFIEC IT Examination Handbook - Information Security Booklet, Dodd-Frank Act Section 1071, GLBA 15 U.S.C. § 6801-6809, SOX Section 404 - Internal Control Assessment. Regulatory-aligned for audit readiness and inspection documentation.

Frequently Asked Questions

What does the Bank Regulatory Examination Preparation Checklist [FREE PDF] cover?

This checklist covers 37 inspection items across 7 sections: BSA/AML Program Readiness, GLBA Privacy & Safeguards Compliance, FFIEC IT & Cybersecurity Readiness, Dodd-Frank Consumer Protection Compliance, SOX Section 404 Internal Controls Assessment, CRA & Fair Lending Compliance, Staff Training & Documentation Readiness. It is designed for banking operations and compliance.

How often should this checklist be completed?

This checklist should be completed quarterly. Each completion takes approximately 90-120 minutes.

Who should use this Bank Regulatory Examination Preparation Checklist [FREE PDF]?

This checklist is designed for Compliance Officer professionals in the banking industry. It can be used for self-assessments, team audits, and regulatory compliance documentation.

Can I download this checklist as a PDF?

Yes, this checklist is available as a free PDF download. You can also use it digitally in the POPProbe mobile app for real-time data capture, photo documentation, and automatic reporting.

Browse More Checklists