From Supervisory Finding to Board Action

An MRA becomes consequential not only when an examiner identifies a risk, but when the applicable framework assigns the institution a required response. This chapter follows that transition under the OCC/FDIC final rule and then compares it with the Federal Reserve's 2013 distinction between a Matter Requiring Attention and a Matter Requiring Immediate Attention (MRIA). The aim is to separate two questions that are often blended: what makes a matter qualify, and how urgently the institution must respond once the matter has been communicated.

The OCC/FDIC MRA Creates a Required Response

The OCC/FDIC agencies characterize an MRA as a concern that rises to the level of requiring presentation to the board of directors and for which the institution must take corrective action. That description gives the label a governance consequence. Management may perform the day-to-day remediation, but the board must be positioned to understand the concern and oversee the institution's response. The MRA is therefore more than an examiner's description of an imperfect process.

At the same time, an MRA is not itself a binding enforcement order. A formal enforcement action carries a different legal form and may impose obligations under its own authority. The final rule's MRA framework is a supervisory standard for matters requiring attention. Treating every MRA as an enforcement order would overstate the label; treating it as optional advice would understate it. The institution must take corrective action, but the MRA is not automatically an unsafe or unsound practice, and merely failing to remediate an MRA does not by itself satisfy the unsafe-or-unsound definition.

This distinction is easiest to see as two linked states. Before the determination, the examiner is evaluating conduct against the MRA standard: a safety-and-soundness concern with a reasonably expected material financial consequence, an already material harm, or an actual banking-related violation. After the determination, the question shifts to institutional response: the matter must receive the level of attention and corrective action that the MRA signifies. A later enforcement decision would require its own application of the relevant criteria; it is not a routine automatic next state.

The response also depends on which neighboring category applies. A supervisory observation identifies an objective weakness below the MRA level and does not create a requirement or supervisory expectation that the institution present it to the board or take corrective action. Management may still decide to improve the practice, and the underlying information may matter to ratings, but the examiner cannot turn a voluntary suggestion into a required action plan simply by repeating it. An actual banking-related violation that is not treated as an MRA or enforcement action can be an other violation. The agency may require remediation and take actions required by law, but it does not impose the broader MRA response merely because the violation exists.

That means the first governance question is not “Who owns remediation?” in the abstract. It is “What response has the agency's classification actually created?” For an MRA, board presentation and corrective action are part of the supervisory consequence. For an observation, the decision to enhance remains with the institution. For an other violation, remediation may be required within the narrower legal-compliance path. Keeping those states separate prevents a bank from treating a required response as optional and prevents an examiner from treating an optional improvement as a mandatory order.

The distinction also clarifies what persists after a finding is communicated.