What it means
The council was created by Congress in the late 1970s to deal with a real problem: several agencies each examined banks in their own way, which meant different rating methods, different report forms and duplicated effort. The FFIEC gives those agencies a single forum in which to agree uniform principles, standards and report formats.
It does not examine banks itself; the member agencies do that. Its members include the Federal Reserve, the Federal Deposit Insurance Corporation (FDIC), the National Credit Union Administration, the Office of the Comptroller of the Currency and the Consumer Financial Protection Bureau, together with a committee representing state regulators.
This mix matters because American banks may be supervised federally, by their state, or both. For non-finance professionals, the FFIEC is most visible through its public data and guidance.
Banks submit quarterly Call Reports (standardised financial statements including the balance sheet and income statement), and the FFIEC maintains the framework behind them. Analysts use this data to compare banks of similar size, and fintech founders use it to understand what regulators expect.
The council publishes guidance on topics such as information security, business continuity and outsourcing to third parties. Many banks treat the FFIEC handbooks as the checklist their examiners will follow, and software vendors that serve banks often design their products around them.
Customers rarely notice the council, but its influence is in every compliance review. Smaller institutions benefit from the council's work as well, because uniform standards stop them facing a different rulebook from each agency.
A credit union and a national bank answering similar questions about cybersecurity or lending practices are assessed against shared expectations, even though their size and supervisors differ. That consistency lowers compliance costs and makes the supervisory process easier to understand for management teams and boards.
The council also runs training for examiners from all member agencies, so staff learn the same techniques and apply them in the same way. Its work on consumer compliance, such as fair lending and data reporting under housing finance rules, adds another layer that touches almost every lender.
Anyone selling software or services to banks will meet these standards sooner or later.
In practice
Real-world examples.
Example
A fintech start-up partners with a small community bank to offer a savings product. The bank's compliance officer sends the start-up the FFIEC guidance on third-party risk, and the start-up must show how it protects customer data before the launch is approved.
Example
An equity analyst compares two regional banks by pulling their quarterly Call Report data. Because every bank files on the same standardised forms, she can line up loan quality and capital ratios side by side.
Example
A credit union's IT manager prepares for an examination. She uses the FFIEC information security handbook as her checklist, mapping each control in her department to the questions examiners are likely to ask. She records evidence for every control, so that the department can answer quickly if an examiner asks to see it.
Case study
Seen in the real world.
Maplewood Community Bank is an illustrative, fictional lender with $900,000,000 in assets and a young compliance team. Its chief executive learned that an examination was due in four months and asked what the examiners would actually focus on.
The compliance lead gathered the FFIEC handbooks on information technology, business continuity and vendor management and ran a self-assessment against each one. She found that two key outsourced service providers had never been reviewed since the contracts were signed.
In this illustrative story the bank completed vendor reviews, tested its recovery plan and fixed documentation gaps before the examiners arrived. The examination was uneventful, and the board agreed to keep the self-assessment as an annual routine. The chief executive later told staff that the exercise cost far less than the remediation work an adverse finding would have required.
Watch out
Common mistakes.
- Thinking the FFIEC is a regulator that examines banks directly, when it is a coordinating council and its member agencies carry out the examinations.
- Treating FFIEC guidance as optional reading, when examiners routinely use it as the benchmark for supervisory findings.
- Assuming FFIEC rules only matter to banks, when technology vendors and fintech partners are expected to meet them through their bank customers.
Questions
People also ask.
Who sits on the FFIEC?
Its members are the federal banking and credit union regulators together with a committee of state supervisors, each appointing representatives, and the chair rotates among the agencies.
What is a Call Report?
It is the standardised quarterly financial report that banks file with their regulators, and the FFIEC maintains the common format.
Does the FFIEC apply outside the United States?
No, it is a US body, although other countries have similar groups that coordinate their own financial supervisors, and global firms often map FFIEC expectations onto their home rules.
From the founder's library
Take it further with the book.
Build your financial confidence beyond this definition. Shihan's full-length guide, Accounting Fundamentals, takes the same plain-English approach and turns it into a complete, practical playbook for non-finance managers, business owners and students - with chapter-end quiz answers and presentation slides included.
25% off with code MMHQ25, applied at checkout. Priced in USD - checkout may show the equivalent in your local currency.
View the book and save 25%Related