Stats
Actions
Tags
Produces the substantive supervision-readiness pack a US bank or bank holding company hands the OCC, FRB, or FDIC examiner-in-charge at the entry meeting and carries through the cycle. Organises preparation around the CAMELS components (or the BHC rated components for a holding-company cycle), the examiner-letter response posture (MRA, MRIA, supervisory recommendation, consent-order article), the MRA / MRIA closure cross-walk with sustained-operation evidence, the Heightened Standards readiness view for covered banks, and the topical examiner-readiness slices (BSA / AML, IT, fair lending, third-party risk) that the cycle scope brings into play. Audience is the head of supervisory affairs, the chief compliance officer, the chief risk officer, the BSA officer, and the examination coordinator. Best for: - A national bank, state-member bank, state non-member bank, or federal savings association is preparing for an OCC, FRB, or FDIC full-scope safety-and-soundness examination and needs the entry-meeting pack with CAMELS-component preparation, evidence inventory, and named-role owners. - A bank holding company is preparing for an FRB BHC supervisory cycle under SR 12-17 (and successors) and needs the BHC rated-component readiness view, consolidated supervision narrative, and risk-governance evidence. - A bank carrying a consent order, a written agreement, an MRIA cluster, or a series of MRAs is building the quarterly remediation update and needs the closure cross-walk plus the sustained-operation evidence package per article. - A covered bank under 12 CFR Part 30 Appendix D (Heightened Standards, $50B+ avg total consolidated assets) is preparing the risk-governance-framework attestation and the board independent-risk-committee evidence ahead of an OCC supervisory engagement. - A bank facing a topical examination (BSA / AML under FFIEC manual, IT under FFIEC IT Handbook, consumer compliance, CRA, fair lending, third-party risk under June 2023 interagency guidance) needs the topical readiness slice that bolts on to the CAMELS spine. - A bank approaching the $50B Heightened Standards threshold needs the forward-looking readiness section examiners will probe in advance of the trigger. Not the right tool when: - The work is the engagement-side scaffolding (entry-meeting choreography, document-handling, privilege posture, request-list mapping, interview-prep) for any FS exam. Use `regulatory-change-management/skills/exam-brief`; this skill chains with that skill, it does not duplicate it. - The work is a single MRA / MRIA write-up artifact for one finding. Use `risk-compliance-core/skills/issue-writeup`; this skill consumes those artifacts and bundles them into the cross-walk. - The work is impact assessment of a newly-published rule. Use `regulatory-change-management/skills/regulatory-impact-assessment`. - The work is a non-bank exam (SEC investment adviser, FINRA broker-dealer, NAIC market-conduct, CFPB non-bank). Use the matching sector-plugin readiness skill or the generic `exam-brief`. - The work is an internal-audit readiness or compliance-testing pack. Use the compliance-testing artifacts; supervision-readiness is built for the regulator handoff, not the internal review cycle.
How this skill is triggered — by the user, by Claude, or both
Slash command
/banking-risk-compliance:banking-supervision-readiness [institution type, primary federal regulator, asset size band, cycle type and dates, prior-cycle MRA/MRIA posture][institution type, primary federal regulator, asset size band, cycle type and dates, prior-cycle MRA/MRIA posture]The summary Claude sees in its skill listing — used to decide when to auto-load this skill
The supervision-readiness pack is the artifact a bank's chief risk officer, chief compliance officer, head of supervisory affairs, BSA officer, and examination coordinator carry into an OCC, FRB, or FDIC examination cycle. It is not the engagement playbook (who-routes-what, document-handling, privilege posture); that lives in `exam-brief`. It is the substantive readiness sprint: what the bank i...
The supervision-readiness pack is the artifact a bank's chief risk officer, chief compliance officer, head of supervisory affairs, BSA officer, and examination coordinator carry into an OCC, FRB, or FDIC examination cycle. It is not the engagement playbook (who-routes-what, document-handling, privilege posture); that lives in exam-brief. It is the substantive readiness sprint: what the bank is going to be rated on, what evidence it has against each rating-driver, where the open supervisory items sit on the closure curve, and what the bank needs to do in the weeks before entry to close the obvious gaps.
The spine is CAMELS for a depository-institution cycle and the BHC rated-component framework for a holding-company cycle. The examiner-letter response posture and the MRA / MRIA closure cross-walk run alongside. For covered banks ($50B+ avg total consolidated assets), the Heightened Standards readiness view sits at the tail. For a topical exam (BSA / AML, IT, fair lending, third-party risk), a topical readiness slice bolts on. The pack itself is firm-confidential by convention; CSI references constrain what the pack can carry forward across access populations.
The named lead attests. The pack is a draft until that step. The skill stops short of speaking for the bank to the regulator.
Settle these before drafting. Most cycles answer them in the first conversation; default and flag where they do not.
When an scope record is supplied, consume it for institution profile, persona, source posture, sector overlay (always banking for this skill), and cross-cutting overlay set. When it is not supplied, ask the questions and default; flag the defaults in the pack.
The pack has a three-part body around a cover, plus a tail that varies with the cycle. Walk it in the order the conversation surfaces evidence; the structured record sorts itself.
Cover and cycle scope. Institution profile (legal name placeholder, type, primary federal regulator, asset size band, charter, registrations, geographic footprint, Heightened Standards applicability). Cycle profile (cycle type, dated fieldwork window, dated review period, rated framework, examiner-in-charge role, supervisory office). Source posture and access population. Confidence label. The cover is the orientation any examiner or board member reads first; the rest of the pack is the answer to the questions the cover raises.
One subsection per component, same internal shape: a component summary, the public criteria the component is rated against, the evidence inventory (system-of-record paths and named-role owners, not screenshots), open issues with trend, and reviewer questions. The component shape forces the pack to read the way examiners read; a pack organised as a flat risk register reads as not-ready.
references/source-anchors.md; the published Appendix D uses lettered Roman-numeral headings without the III.B-style sub-numbering colloquially used). Evidence inventory pulls board minutes (redacted to non-confidential), risk-committee charter and minutes, audit-plan coverage and independence evidence, compliance-program-effectiveness reporting, and the MRA / MRIA closure log.For BHC supervisory cycles, replace CAMELS with the BHC rated-component framework (RFI/C(D) or successor as applicable [verify current FRB rating system]). Component subsections take the same shape; the public criteria shift to FRB Bank Holding Company Supervision Manual sections, FRB SR 12-17, and the consolidated supervisory framework.
For each open or expected examiner-letter item (MRA, MRIA, supervisory recommendation, consent-order article, written-agreement provision, pre-finding question), the pack carries: item ID, source (regulator, letter date, finding number), category, finding text (verbatim where the access population allows; summarised where it does not), CAMELS / topical link, action-plan summary with named-role owner and dated milestones, evidence pointer (system-of-record path), closure status (open, in-remediation, sustained-remediation, ready-for-validation, closed-pending-examiner-confirmation), aging vs target, and an escalation-risk flag.
The category matters. MRAs are matters requiring attention; MRIAs are matters requiring immediate attention. Aging tolerance, escalation risk, and board-reporting expectations differ between them, and a pack that conflates them reads as not-ready. If the regulator labels the item differently than the bank's tracker, defer to the regulator's label. The category and the source-letter date are the inputs to the aging calculation; the aging calculation is the input to the escalation-risk flag.
A matrix view, one row per finding, with columns: finding ID, finding text, regulator, date issued, response date, action taken, evidence type (policy update, control implementation, training, system change, sustained-operation period observed), sustained-operation period in months, closure-readiness assessment (low, medium, high), named-role owner, and last status-update date.
Closure-readiness high requires a documented sustained-operation period. Banks typically use 6 to 12 months internally; examiners apply judgement. A pack that marks every item closure-ready without sustained-operation evidence reads as overconfident and triggers examiner skepticism. Default to medium when the sustained-operation period is below the bank's policy threshold; default to low when the action plan is dated within the last 30 days.
For covered banks under 12 CFR Part 30 Appendix D, the tail carries a Heightened Standards readiness section: risk-governance-framework attestation status, board independent-risk-committee evidence, risk-appetite-statement cross-walk, three-lines-of-defense maturity assessment, and the rebuttable-presumption posture if applied. For banks approaching the $50B threshold, the tail carries the forward-looking readiness section even where the framework is not yet binding.
For a topical cycle, the tail carries the topical readiness slice. BSA / AML readiness pulls from the FFIEC BSA/AML Examination Manual structure (CIP, CDD, BO, suspicious-activity monitoring, CTR, OFAC) and the bank's BSA-officer attestation and most recent independent-testing report. IT readiness pulls from the FFIEC IT Examination Handbook (Information Security, Management, Outsourcing Technology Services) and the most recent IT audit and penetration-testing posture. Consumer-compliance and CRA readiness pull from the FDIC Compliance Examination Manual or OCC consumer-compliance handbook and the bank's CRA performance evaluation history; flag the CRA modernised-rule status as [verify current effective state given litigation history] because the 2023 final rule has been subject to legal challenge. Fair-lending readiness pulls from ECOA / Reg B, FHA, HMDA controls and the bank's most recent fair-lending statistical-analysis report. Third-party risk readiness pulls from the Interagency Guidance on Third-Party Relationships: Risk Management (June 2023) and the bank's third-party inventory with criticality classification.
The tail also carries recommended owner actions before entry meeting (concrete, dated, named-role), the source trace (every material claim cites a source from references/source-anchors.md or the topical references; unsupported items marked [evidence needed]; section references that cannot be confirmed marked [verify section]), and the sign-off block.
This skill is banking-sector-only. There is no references/sector-overlays/ directory because the entire skill is the banking sector overlay. Cross-cutting overlays load when the cycle scope implicates them.
cross-cutting/cyber.md loads when the cycle includes IT examination scope, when the FFIEC IT Examination Handbook drives the request list, or when a cyber incident in the review period shapes the Management or Sensitivity component. Anchors: FFIEC IT Examination Handbook (Information Security booklet, current edition [verify edition]), 23 NYCRR Part 500 for state-chartered banks supervised by NYDFS, the SEC cyber-disclosure framework for the BHC where the BHC is a public registrant.cross-cutting/conduct.md loads when the cycle includes consumer-compliance scope. Anchors: CFPB Supervision and Examination Manual (current edition [verify section]), FDIC Compliance Examination Manual, OCC consumer-compliance handbook, UDAAP examiner expectations.cross-cutting/privacy.md loads when the cycle includes IT or compliance with information-security overlap. Anchors: GLBA Safeguards Rule (16 CFR 314.4 [verify]), Reg P (12 CFR 1016).cross-cutting/climate.md does not load. Climate-related financial-risk supervision is evolving; flag as a [verify current state] reviewer question rather than embedding an overlay.Loading an overlay the cycle does not implicate adds noise without challenge value. Loading none when one applies is the more common failure mode.
Every material claim about supervisory framework, rated component, examiner-letter mechanics, response-window calculation, sustained-operation expectation, or threshold trigger cites a source from references/source-anchors.md (or a loaded overlay) by path. Unsupported items carry [evidence needed]. Section references that cannot be confirmed get [verify section]. CSI references constrain the pack's access population. Source evidence, bank management assertion, public-source obligation, generated inference, and open legal question stay distinguishable. Roles only, never named individuals. No named institutions in narrative beyond a public defendant in a finalised consent order, and only for structural pattern. The pack stops short of speaking for the bank to the regulator. The named lead attests.
Pack depth scales to cycle type and stakes: a targeted IT exam pack reads short, organised around the FFIEC IT Handbook spine and the bank's IT audit posture; a full-scope OCC exam pack at a Heightened Standards covered bank reads long, with all six CAMELS components, the Heightened Standards section, the MRA / MRIA cross-walk, and the topical readiness slices for any in-scope topical exam running in parallel; a quarterly consent-order remediation update reads as the cross-walk plus the article-by-article evidence section. Audience drives shape: the head of supervisory affairs and the chief risk officer run the operational version; a board pre-read distills to the executive summary, the open MRA / MRIA aging chart, and the recommended owner-action list. Source posture (public-only through connector-aware) drives what the pack can assert at high confidence and what carries [evidence needed]. Where firm-specific policy or named review machinery applies, it lives in references/firm-overlay.md and is consumed when present; the pack itself stays generic.
high requires a documented sustained-operation period. A pack that marks every item closure-ready without sustained-operation evidence triggers examiner skepticism. Default to medium when the sustained-operation period is below the bank's policy threshold; default to low when the action plan is dated within the last 30 days.[verify current state] when the pack relies on a specific Modernization initiative.references/source-anchors.md — citations and excerpts for the named anchors (federal banking supervisory framework, CAMELS and BHC rated framework, MRA / MRIA framework, Heightened Standards, topical examination manuals, CSI regimes, threshold triggers).references/firm-overlay.md — firm-installed supervisory-history, named examination-coordinator role, internal CSI-handling SOP, response-letter style guide, sustained-operation policy threshold; consumed when present.templates/default-output.md — pack template carrying cover, Parts A / B / C, and the variable tail.schemas/supervision-readiness.schema.json — structured-output contract for downstream consumption (reuses issue.schema.json for individual findings and control.schema.json for control evidence).examples/ — public-source-derived scenarios (OCC full-scope at a midsize national bank approaching the Heightened Standards threshold; FRB consent-order quarterly update at a state-member bank with eight articles spanning BSA / AML, third-party risk, and IT).Default to drafting against templates/default-output.md. Render as Word, Excel, PowerPoint, or Markdown when the audience or workflow asks for it; a full-scope readiness pack typically rides as a Word memo with the MRA/MRIA cross-walk in Excel, while a board pre-read collapses to a deck. Produce the structured record at schemas/supervision-readiness.schema.json when downstream automation or a registered consumer needs it. The named lead attests; the pack is a draft until that step.
Downstream consumers: exam-brief reads the cycle profile, the open-item posture, and the topical-readiness flags to set the engagement-side scaffolding (request-list mapping, document-handling, interview-prep). issue-writeup reads the examiner-letter items and the closure cross-walk to refresh individual finding artifacts. implementation-plan reads the recommended owner actions and the action-plan-stage cross-walk rows for the milestone build-out. risk-committee-pack reads the MRA / MRIA cross-walk and the Heightened Standards section for the standing committee section. The schema is the cross-skill contract; additive changes only, never silent renames. Breaking changes ship as a versioned migration with downstream skills told in advance.
npx claudepluginhub anotb/second-line-financial-services --plugin banking-risk-complianceCreates, edits, and optimizes skills for Claude Code, including drafting, evaluating with test prompts, iterating on performance, and improving skill descriptions for better triggering accuracy.