The OCC updated its Cybersecurity Supervision Work Program on September 21, 2026, to align with the latest NIST Cybersecurity Framework categories and subcategories.
What changed
The work program structure is updated to address evolving cybersecurity risks while maintaining existing examination procedures.
Compliance perspective
Financial institutions must ensure their cybersecurity strategies are in line with the updated work program to remain compliant.
Key date
Effective date: September 21, 2026.
Need help keeping up with these changes?
Tell us where you operate and what licenses you hold; we'll handle the filings and renewals so changes like this do not catch you off guard.