Skip to content
Action required OCC Oct 4, 2026

OCC Bulletin 2026-48: Cybersecurity Supervision Work Program

The OCC updated its Cybersecurity Supervision Work Program to enhance framework and risk-based assessments for cybersecurity. These updates aim to bolster the supervision strategy for ensuring financial institutions effectively manage cybersecurity risks.

The OCC updated its Cybersecurity Supervision Work Program to enhance framework and risk-based assessments for cybersecurity. These updates aim to bolster the supervision strategy for ensuring financial institutions effectively manage cybersecurity risks.

What changed

Structure and references of the cybersecurity supervision program were updated.

Compliance perspective

Financial institutions must integrate the updated work program into their cybersecurity risk management strategies.

Need help keeping up with these changes?

Tell us where you operate and what licenses you hold; we'll handle the filings and renewals so changes like this do not catch you off guard.

Keep reading

More regulatory updates

Other recent rule changes our team is tracking.

  • Action California DFPI CA Oct 4, 2026

    California Stablecoin Regulation Framework

    California established a licensing framework for payment stablecoin issuers, effective October 1, 2026.

  • Action FinCEN Oct 4, 2026

    FinCEN Geographic Targeting Order

    FinCEN issued a Geographic Targeting Order requiring MSBs along the Southwest Border to enhance recordkeeping and reporting requirements.

  • Watch FDIC Oct 4, 2026

    FDIC Proposed Revision of Bank Merger Review Framework

    The FDIC proposed an overhaul of its bank merger review framework, including a new 'deemed approval' process for mergers and acquisitions.