Fed MRA: Triggers, Remediation, and Escalation

A Federal Reserve MRA, or Matter Requiring Attention, is a written supervisory finding issued by Fed examiners when they identify a weakness at a bank that needs corrective action within a reasonable timeframe. It is not an enforcement action, but it is a formal expectation directed to the bank’s board of directors, and ignoring it is how banks end up in enforcement. The framework governing MRAs comes from the Fed’s 2013 guidance in SR 13-13 and CA 13-10.¹

What Triggers an MRA

An MRA covers matters the Fed considers important enough to require correction, where a threat to safety and soundness exists but is not severe enough to demand immediate priority action.²

Findings typically emerge from routine on-site examinations or off-site monitoring by regional Reserve Banks. Common subject areas include anti-money-laundering controls, lending practices, information security, capital planning, and fair lending compliance. The unifying test is whether the identified condition, left alone, could lead to financial losses, operational breakdowns, or violations of law.

MRA Versus MRIA

The Fed uses two tiers of supervisory findings, and treating them as interchangeable is a mistake. A Matter Requiring Immediate Attention (MRIA) is the more severe classification. Where an MRA allows a reasonable remediation timeline, an MRIA requires the bank to begin corrective action immediately and on a priority basis.³

Fed guidance identifies four situations that warrant an MRIA:

The issue poses significant risk to the bank’s safety and soundness.
The bank is materially violating applicable laws or regulations.
A previously identified weakness has escalated because the bank did not address it adequately.
In consumer compliance examinations, the issue could cause significant consumer harm.

Both classifications require corrective action. The MRIA label signals that the Fed considers delay unacceptable.²

How the Finding Reaches the Bank

Reserve Banks communicate MRAs in writing through examination reports, inspection reports, targeted review summaries, or other formal supervisory correspondence. Every MRA and MRIA must be formally documented in these written reports.⁴

Communications are directed to the bank’s board of directors or an executive-level committee of the board. Board members do not personally carry out remediation, but the Fed treats them as ultimately accountable for the bank’s safety, soundness, and legal compliance.²

MRAs are confidential supervisory information. They are not publicly disclosed, and the finding remains a private matter between the Fed and the institution unless it later escalates into a public enforcement action.

What the Bank Must Do

After receiving an MRA, the board must provide a written response to the Reserve Bank outlining its plan, progress, and resolution of the finding.²

Each MRA communication specifies a timeframe within which corrective action must be completed. That timeframe may start as an estimate when the bank first needs to do preliminary planning, but it is expected to become more precise as remediation progresses. When the corrective timeline spans more than one examination cycle for safety-and-soundness issues, or exceeds twelve months for consumer compliance issues, the plan must include interim progress reports.⁴

Strong plans generally go beyond the minimum. Banks conduct a root cause analysis, identify the personnel or departments responsible for executing corrections, and set milestones with target dates. These elements are not explicitly mandated in published guidance, but examiners look for evidence that the bank understands the problem and has a credible path to fixing it. A plan that promises compliance without showing how it will be achieved is unlikely to satisfy reviewers.

Board Responsibilities

The board’s role is more than approving a plan. The Fed expects the board, or an executive-level committee such as the audit committee, to direct management to take corrective action and to provide ongoing oversight of that effort, including approving management actions where necessary.²

Examiners frequently review board meeting minutes on subsequent visits to confirm that directors discussed the findings, understood the risks, and monitored progress. A pattern of inattention can itself become a finding.⁴

Closing the MRA

An MRA stays open until examiners confirm satisfactory corrective action. The Reserve Bank must follow up on every MRA to assess progress and verify completion, with the follow-up timeline matching the corrective action timeline set in the original finding.⁴

The form of follow-up varies. The Fed may use a subsequent full-scope examination, a targeted review, continuous monitoring, or reliance on validation work performed by the bank’s own internal audit function, provided that program is effective. When examiners rely on internal audit, they review the relevant work papers and may meet with the audit staff who documented the resolution.⁴

Once examiners are satisfied, they must document their rationale for closing the issue and communicate the results in writing to the bank. That written confirmation formally ends the supervisory cycle for that finding. For longer remediation efforts, Reserve Banks assess progress at intermediate points, judge whether efforts are satisfactory or unsatisfactory, and evaluate whether the original timeline remains reasonable.

What Happens If the MRA Isn’t Fixed

If a bank does not adequately address an MRA on time, examiners can reclassify it as an MRIA. A change in the bank’s circumstances, business environment, or strategy can also trigger reclassification even where the bank has been making progress.²

Beyond reclassification, when follow-up indicates that corrective action has not been satisfactory, formal or informal enforcement action may be necessary.⁴ Under 12 U.S.C. § 1818, the Federal Reserve has broad authority to act against banks engaging in unsafe or unsound practices or violating laws and regulations. The tools available include:

Cease and desist orders, which are legally binding directives to stop specific practices or take affirmative corrective action.
Restrictions on the bank’s business activities, growth, or dividend payments to shareholders.
Civil money penalties, imposed in tiered amounts depending on the severity of the violation.
Orders requiring the bank to employ qualified officers or employees, potentially subject to the Fed’s approval.

Enforcement actions, unlike MRAs, are public.⁵

Outstanding MRAs also affect supervisory ratings. The number of open MRAs and MRIAs is one consideration in assigning a rating, and a large number of outstanding findings may itself indicate the need for further investigation or enforcement.⁴ A rating downgrade can restrict a bank’s ability to pursue acquisitions, open branches, or engage in certain activities, and it increases the frequency and intensity of future examinations at exactly the point when the bank’s resources are already stretched by remediation work.

1
Board of Governors of the Federal Reserve System. SR 13-13 / CA 13-10: Supervisory Considerations for the Communication of Supervisory Findings
2
Federal Reserve. Supervisory Considerations for the Communication of Supervisory Findings
3
Federal Reserve Board. How Federal Reserve Supervisors Do Their Jobs
4
Federal Reserve. Supervisory Considerations for the Communication of Supervisory Findings
5
Federal Reserve Board. Understanding Enforcement Actions