Recommendation: The Division Director for Risk Management Supervision (RMS) should require case managers to document how high-risk areas in the scoping plan were considered by the examination team if they were not addressed in the examination report. (Recommendation 1)

Agency: Federal Deposit Insurance Corporation
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Division Director for RMS should implement policies to require that higher-level managers review case managers' documentation that describes whether banks have fully addressed MRBAs. (Recommendation 2)

Agency: Federal Deposit Insurance Corporation
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Division Director for RMS should revise examination documentation retention policies to increase the retention period beyond one examination cycle for banks with satisfactory or better composite ratings. (Recommendation 3)

Agency: Federal Deposit Insurance Corporation
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The FDIC Chairman should direct RMS and the Legal Division Ethics Unit to develop a process for systematically requesting and collecting information on where departing examiners, including examiners-in-charge, enter into employment after leaving FDIC. (Recommendation 4)

Agency: Federal Deposit Insurance Corporation
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Director of the Division of Risk Management Supervision of FDIC should take steps to improve the completeness of matters requiring board attention (MRBA) data in its tracking system, in particular, by developing a structure that allows examiners to record MRBAs at progressively more granular levels (from a broad level such as examination area to more specific levels, including risk or concern type). (Recommendation 3)

Agency: Federal Deposit Insurance Corporation
Status: Open

Comments: FDIC agreed that a structure should be enhanced to allow staff to further categories MRBAs at the point of entry into the system. As of March 2020, no action has been taken on this recommendation. GAO will continue to monitor for any updates to FDIC procedures.

Recommendation: The Senior Deputy Comptroller for Large Bank Supervision should revise Large Bank Supervisions policy to require documentation of examination teams internal deliberations that lead to consequential decisions for the bank, such as the decision whether to issue a Matter Requiring Attention, among others. (Recommendation 1)

Agency: Department of the Treasury: Office of the Comptroller of the Currency
Status: Open

Comments: As of July 2020, OCC continued to disagree with GAO's recommendation and stated that it neither has taken nor plans to take any actions to address it. We maintain that consistently documenting internal deliberations that lead to consequential decisions for the bank could increase the transparency and accountability of examination teams' findings and decisions.

Recommendation: The Senior Deputy Comptroller for Large Bank Supervision should revise Large Bank Supervisions policy to require that bank examination teams retain drafts of key documents, including the conclusion memorandum and supervisory letter, that record the supervisory review process. (Recommendation 2)

Agency: Department of the Treasury: Office of the Comptroller of the Currency
Status: Open

Comments: As of July 2020, OCC continued to disagree with GAO's recommendation and stated that it neither has taken nor plans to take any actions to address it. We maintain that revising the policy to ensure that drafts of key documents are not deleted will help OCC increase the transparency and accountability of the supervisory review process.

Recommendation: The Senior Deputy Comptroller for Large Bank Supervision should revise Large Bank Supervisions policy to require documentation of communications with banks, including those between executive and senior management and banks, that inform supervisory decisions. (Recommendation 3)

Agency: Department of the Treasury: Office of the Comptroller of the Currency
Status: Open

Comments: As of July 2020, OCC continued to disagree with GAO's recommendation and stated that it neither has taken nor plans to take any actions to address it. We maintain that having meeting minutes and other documentation of key communications would provide OCC with a more complete and transparent record of the information banks provide to examiners and how that information impacts supervisory decisions.

Recommendation: The Senior Deputy Comptroller for Large Bank Supervision should systematically track and monitor Large Bank Supervisions use of informal recommendations. (Recommendation 4)

Agency: Department of the Treasury: Office of the Comptroller of the Currency
Status: Open

Comments: As of July 2020, OCC continued to disagree with GAO's recommendation and stated that it neither has taken nor plans to take any actions to address it. We maintain that tracking and monitoring the use of informal recommendations could increase transparency of the supervisory process, which could help Large Bank Supervision mitigate the risk of regulatory capture.

Recommendation: The Chief Counsel should develop a policy for Large Bank Supervision (1) to check employees active conflicts of interests during the staffing process for examinations and other supervisory activities and (2) to document the results of this check. (Recommendation 6)

Agency: Department of the Treasury: Office of the Comptroller of the Currency
Status: Open

Comments: As of July 2020,, OCC continued to disagree with GAO's recommendation and does not plan to develop a policy to check if employees have active conflicts of interest during the staffing process for examinations and other supervisory activities. OCC noted in its December 2018 response letter to the report that they believed such a policy would shift the responsibility for ensuring compliance with recusal requirements from employees to those responsible for staffing. We maintain that this recommendation does not aim to alleviate the personal responsibility all employees have to comply with recusal requirements. Rather, our recommendation aims to strengthen the due diligence of those responsible for staffing by requiring an independent, preliminary check of active conflicts of interest.

Recommendation: The acting Bank president and Board chairman should ensure that the Bank evaluates and implements methods to further promote and sustain an antifraud tone that permeates the Bank's organizational culture, as described in GAO's Fraud Risk Framework. This should include consideration of requiring training on fraud risks relevant to Bank programs, for new employees and all employees on an ongoing basis, with the training to include identifying roles and responsibilities in fraud risk management activities across the Bank. (Recommendation 1)

Agency: Export-Import Bank of the United States
Status: Open

Comments: In November 2019, EXIM told us it continues work in this area and will provide us information on this work as it is completed. We will continue to monitor EXIM's progress in this area.

Recommendation: The acting Bank president and Board chairman should ensure that the Bank develops and implements an antifraud strategy with specific control activities, based upon the results of fraud risk assessments and a corresponding fraud risk profile, as provided in GAO's Fraud Risk Framework. (Recommendation 4)

Agency: Export-Import Bank of the United States
Status: Open

Comments: In November 2019, EXIM told us it was in the final stages of its process for completing its antifraud strategy. We will continue to monitor EXIM's efforts in this area.

Recommendation: The acting Bank president and Board chairman should ensure that the Bank identifies, and then implements, the best options for sharing more fraud-related information--including details of fraud case referrals and outcomes--among Bank staff, to help build fraud awareness, as described in GAO's Fraud Risk Framework. (Recommendation 5)

Agency: Export-Import Bank of the United States
Status: Open

Comments: In November 2019, EXIM stated that it is continuing to work with its Inspector General to implement this recommendation. We will continue to monitor EXIM's progress in this area.

Recommendation: The acting Bank president and Board chairman should lead efforts to collaborate with the Bank's OIG to identify a feasible, cost-effective means to systematically track outcomes of fraud referrals from the Bank to the OIG, including creating a means to link the OIG's proven cases of fraud to the specific Bank transactions from which the OIG actions arose. If any such means are found to be feasible and cost-effective, the acting Bank president and Board chairman should direct appropriate staff to implement them, with such information to be used for purposes consistent with GAO's Fraud Risk Framework, such as data analytics. (Recommendation 6)

Agency: Export-Import Bank of the United States
Status: Open

Comments: In November 2019, EXIM stated that it is continuing to work with its Inspector General to implement this recommendation. We will continue to monitor EXIM's progress in this area.

Recommendation: The acting Bank president and Board chairman should ensure that the Bank monitors and evaluates outcomes of fraud risk management activities, using a risk-based approach and outcome-oriented metrics, and that it subsequently adapts antifraud activities or implements new ones, as determined to be appropriate and consistent with GAO's Fraud Risk Framework. (Recommendation 7)

Agency: Export-Import Bank of the United States
Status: Open

Comments: In November 2019, EXIM stated that it is continuing work to implement this recommendation. We will continue to monitor EXIM's progress in this area.

Recommendation: As the Board of Governors implements plans to develop an ERM framework, it should include a component to identify and assess risks of regulatory capture across the LISCC program. (Recommendation 1)

Agency: Federal Reserve System: Board of Governors
Status: Open

Comments: In September 2020, the Federal Reserve told us the status of their response to this recommendation had remained unchanged since their August 2018 update. In August 2018, the Board of Governors reported to us that it was developing its ERM framework. The Board added that it was establishing a Board Risk Committee (comprised of senior leaders) to oversee its ERM program and serve as the central forum for addressing Board-wide risk issues. The Board also said that it has begun to implement a number of strategic components of the ERM framework. In August 2019, the Board stated that in their view, the ERM framework they are developing would not significantly alter the management processes that the Board and System have in place under the LISCC program that continue to work effectively. The Board reported to us that it has continued to develop the ERM program with guidance of the Board Risk Committee, which meets quarterly, and continues to serve as the central forum for Board-wide risk issues and oversight of the ERM program. In August 2020, the Board added that it would take several years to develop the ERM program. The Board also will continue to implement strategic components of the ERM framework throughout the Board.

Recommendation: The Board of Governors should finalize and implement program-wide guidance for the LISCC Reserve Banks on implementing LISCC policies. (Recommendation 2)

Agency: Federal Reserve System: Board of Governors
Status: Open

Comments: In September 2020, the Federal Reserve told us the status of their response to this recommendation had remained unchanged since their August 2019 update. In August 2019, the Board of Governors told us that the LISCC supervisory program had taken several steps to "finalize and implement program-wide guidance for the LISCC Reserve Banks on implementing LISCC policies." The Board reported that in 2017 it had issued a near-final LISCC program manual, which they said will memorialize all aspects of the LISCC supervisory program. The Board added the updated manual will reflect the results of a self-assessment of the LISCC Program's first full year of operations under the LISCC core program model, and the initial implementation of the new Large Financial Institution Ratings Framework. The Board also said that, since the last update, the LISCC supervisory program's operating policies, procedures, and templates for the conduct of supervisory activities have been completed and implemented.

Recommendation: The Board of Governors should streamline its conflict-of-interest disclosure review process for participants in the LISCC program, such as by storing disclosure information in compatible electronic systems. (Recommendation 4)

Agency: Federal Reserve System: Board of Governors
Status: Open

Comments: In September 2020, the Federal Reserve told us the status of their response to this recommendation had remained unchanged since their August 2018 update. In August 2018, the Board of Governors told us that they were assessing the feasibility of integrating existing electronic systems. They added that they have drafted guidance that develops a LISCC-specific conflicts of interest and examiner credential program that will seek to ensure consistency in the interpretation and application of conflicts of interest rules for all staff, both at the Board and the Reserve Banks, that participate in the LISCC supervisory program. They said that the Board plans to issue this guidance and begin implementation of a more consistent and centralized disclosure review approach in 2018. In addition, they said that they have begun collecting and storing conflicts of interest disclosure information for all LISCC participants, including Board LISCC staff, in one electronic system. They added that they have provided initial training to Board LISCC staff on the disclosure review process and the electronic system to ensure consistent collection of conflicts of interest data for all LISCC participants.

Recommendation: The Board of Governors should systematically collect and maintain information on the institutions supervisory employees work for before they are hired by the Federal Reserve and their employment destination when they leave. (Recommendation 5)

Agency: Federal Reserve System: Board of Governors
Status: Open

Comments: In September 2020, the Federal Reserve told us the status of their response to this recommendation had remained unchanged since their August 2018 update. In August 2018, the Board of Governors told us that they had implemented policies intended to mitigate the risk that an employee may be influenced by prior employment or the prospect of future employment and place their private interests ahead of the organization's supervisory mission. As an example, they said that recently the Federal Reserve broadened the scope of post-employment restrictions applicable to senior examiners. They added that the Board has begun to develop a more systematic approach to collect and monitor pre- and post-employment data through the use of an electronic system. They said that this updated electronic system is scheduled to be released, for both Board and Reserve Banks use, in 2019.

Recommendation: The Board of Governors should conduct a periodic self-assessment of ethics programs, policies, and procedures that apply to LISCC program participants. (Recommendation 6)

Agency: Federal Reserve System: Board of Governors
Status: Open

Comments: In September 2020, the Federal Reserve told us the status of their response to this recommendation had remained unchanged since their August 2018 update. In August 2018, the Board of Governors told us that their Ethics program staff and Supervision & Regulation staff are jointly assessing the current ethics programs, policies, and procedures applicable to LISCC program participants. The Federal Reserve expects to finalize and implement new conflicts of interest policies and procedures applicable to LISCC participants in 2019.