OCC updates cyber examination mapping without new procedures

1 item · Daily priorities first, then latest additions

Linked story

Research cutoff: September 27, 2026 · 9:05 AM MDT. Stories show source dates; deep dives show publication dates and link to dated evidence.

PolicySupervisory updateIssued Sep 21, 2026

OCC updates cyber examination mapping without new procedures

The OCC’s September 21 cybersecurity bulletin updates the structure and references of its examiner work program to align with the evolving NIST framework. The agency explicitly says examination procedures are unchanged and no new regulatory expectations are created.

Why it matters

Analysis

Analysis: update control crosswalks and evidence ownership before treating the release as a new remediation mandate. The useful test is whether existing incident response, recovery and third-party evidence can be retrieved and explained under the revised mapping.

What remains uncertain

Banks are not required to use the OCC work program as their own assessment tool. A mapping change does not establish that a particular bank’s controls are sufficient.

Sources

OCC Bulletin 2026-48 — cybersecurity work program

Added Sep 27OCC Bulletin 2026-48 — cybersecurity work program

LATEST RESEARCH

Checked Sep 27, 9:05 AM MDT

NEXT CATALYSTS

SEP 29

JOLTS

August labor demand and quits · Scheduled 10 AM ET / 8 AM MDT.

SEP 29

AI banking · Salt Lake City

9 AM–6 PM MDT · Decisioning, governance and implementation questions.

SEP 30

GDP & income / outlays

Q2 GDP third estimate and August income / PCE · Scheduled 8:30 AM ET / 6:30 AM MDT.

OCT 02

Employment report

September payrolls and unemployment · Scheduled 8:30 AM ET / 6:30 AM MDT.

OCT 09

Consumer sentiment · preliminary

10 AM ET / 8 AM MDT · Check household confidence and inflation expectations.

OCT 14

Consumer prices

September CPI and real earnings · Scheduled 8:30 AM ET / 6:30 AM MDT.

OCT 25–27

ABA · Salt Lake City

Banking, deposits and supervisory priorities.

OCT 27–28

FOMC meeting

Scheduled policy meeting · Assess the rate decision and implications for funding costs and credit demand.

OCT 29

GDP & income / outlays

Q3 GDP advance estimate and September income / PCE · Scheduled 8:30 AM ET / 6:30 AM MDT.

NOV 16

Third-party guidance comments due

Published deadline · Evidence on proportional oversight and implementation choices.

Official economic calendars reviewed September 27, 2026 at 9:05 AM MDT. Event dates remain subject to change; follow the linked organizers.U.S. economic calendar

CREDIT & MERCHANT

Decision agenda

Monitor

Analysis: compare household sentiment with actual spending and payment trends, then assess the next income, inflation and employment releases. Sources: the consumer-sentiment story and BEA/BLS releases linked in the feed and calendar.

Investigate

Analysis: test whether confirmed fraud incidents predict hardship contacts, lower card repayment or abandoned applications after controlling for prior credit risk; the published survey associations are a hypothesis, not causal proof. Source: the BPI/CFPB fraud story in the feed.

Prepare

Analysis: map high-impact third-party dependencies, data access and exit options before the November 16 comment deadline. Source: proposed interagency guidance in the research library.

Discuss

Analysis: require cohort, conversion denominator, mature losses and explanation evidence before adopting a new underwriting model. Sources: Affirm technical account and the ECOA article.

Analysis based on public information.

Daily newsfeed

OCC updates cyber examination mapping without new procedures

Analysis

What remains uncertain

Sources