Failing to respond to an MRA (Matter Requiring Attention) starts a predictable escalation: the finding repeats or elevates, ratings get downgraded, informal agreements follow, and formal enforcement — public orders, penalties, and restrictions — sits at the bottom of the ladder. Regulators treat an unaddressed supervisory finding as evidence about management itself, not just about the underlying deficiency. And "not responding" includes the most common failure mode: responding on paper without actually executing the fix.
Key Takeaways:
- Unaddressed MRAs escalate on a known ladder: repeat or elevated findings, rating downgrades, informal actions, then formal enforcement
- Repeat MRAs are specifically tracked and read as a management failure, not merely an open item
- Ratings consequences typically hit the management component of CAMELS and, for compliance findings, the consumer compliance rating
- Collateral consequences include stalled expansion applications, potentially higher deposit insurance assessments, and more intensive examinations
- Examiners validate execution — a well-written response with no follow-through counts as non-responsiveness
The Escalation Ladder, Rung by Rung
Supervisory escalation is graduated and well-documented. An institution rarely jumps from a first MRA to a consent order; it descends one rung at a time, and each rung is a decision point the institution controls.
- MRA issued. The examiner identifies a deficiency and directs correction. This is the cheapest place to solve the problem.
- Repeat or elevated finding. The deficiency persists at the next supervisory contact. The Federal Reserve elevates uncorrected MRAs to MRIAs (Matters Requiring Immediate Attention) under SR 13-13/CA 13-10, which lists insufficiently addressed repeat criticism as an explicit MRIA trigger. The OCC issues a repeat MRA and tracks it as such.
- Rating downgrades. Component ratings fall, then possibly the composite. Downgrades change the institution's supervisory posture across the board.
- Informal enforcement. A memorandum of understanding (MOU) or board resolution commits the institution to correction in a documented, trackable form.
- Formal enforcement. Written agreements, consent orders, cease-and-desist orders, and civil money penalties — public actions with legal force. In extreme cases involving individual misconduct or disregard, individual accountability measures up to removal and prohibition are available to the agencies.
Our overview of bank enforcement action types explains rungs four and five in detail.
Why Repeat MRAs Are Read as a Management Failure
A first MRA says a process broke. A repeat MRA says the institution was told, committed to fix it, and didn't. That second message is about governance, and regulators weight it accordingly.
The OCC's Bulletin 2014-52 formalizes this: each MRA documents a Concern, Cause, Consequence, Corrective action, and Commitment, and examiners follow up on whether the board's commitment was met. A repeat MRA is a documented broken commitment. The Federal Reserve's framework reaches the same result through elevation — an MRA that persists because of "insufficient attention or inaction" becomes an MRIA, with compressed timelines and direct board accountability.
How Unresolved Findings Affect CAMELS and Compliance Ratings
Examination ratings are where unresolved findings become expensive. Responsiveness to supervisory criticism is a core input to the management component of the CAMELS rating: a board and management team that lets findings age demonstrates exactly the weakness that component measures. Compliance-related findings that go unaddressed similarly drag down the consumer compliance rating.
Downgrades are not symbolic. A composite or component downgrade can move the institution out of "well managed" status, shorten its examination cycle, raise its deposit insurance assessment rate under the FDIC's risk-based pricing, and eliminate eligibility for expedited regulatory treatment in various applications.
From Informal Agreements to Formal Enforcement
When findings age without credible progress, agencies shift from supervisory communication to enforcement. The informal tier — MOUs and board resolutions — is non-public but consequential: it converts examiner expectations into documented commitments and puts the institution on a formal remediation clock.
The formal tier is public. Written agreements, consent orders, and cease-and-desist orders appear in public databases such as the FDIC's enforcement decisions and orders, carry legal force, and often include activity restrictions, mandated third-party reviews, and civil money penalties. Once an institution is operating under a formal action, the cost of the original deficiency has multiplied several times over — in legal fees, consulting spend, management attention, and reputation. Our explainer on what an FDIC consent order means covers life under a formal action.
The Collateral Consequences Nobody Prices In
The escalation ladder is only part of the bill. Open supervisory findings impose costs that never appear in the report of examination:
- Frozen expansion. Regulators weigh outstanding supervisory issues when evaluating expansionary applications — branches, mergers and acquisitions, new activities. An institution with aging MRAs frequently finds its growth plans on hold until the record improves.
- Assessment costs. For FDIC-insured institutions, downgrades stemming from unresolved findings can feed into higher deposit insurance assessment rates.
- Examination intensity. Unresolved findings invite targeted follow-up reviews, expanded scopes, and more frequent supervisory contact, each of which consumes staff time that remediation needed.
- Credibility drain. Every future request — an extension, a de novo product, a favorable exercise of examiner judgment — is filtered through the record of how the institution handled its last findings.
Responding on Paper Is Not Responding
The escalation ladder is usually not triggered by silence. It is triggered by responses that were written, submitted, and never executed. Examiners validate execution: they test whether the committed actions happened, whether they addressed the root cause, and whether the corrected process is still operating.
Adequate responsiveness has a recognizable shape: board-documented ownership, a corrective action plan with named owners and dates, execution evidence captured as milestones complete, independent validation that the fix works, and proactive communication when a date will slip. Our guide on how to respond to an MRA from the FDIC walks through that structure. The institutions that escalate are rarely the ones that missed a deadline by a week; they are the ones whose responses were paperwork.
How Teams Keep Findings From Escalating
Findings escalate when execution is invisible — when the corrective plan lives in a document, progress lives in email threads, and nobody can prove what actually happened until the examiner asks. At that point, the institution is reconstructing a record instead of maintaining one.
Canarie makes execution visible by default. Each finding becomes a tracked workflow with assigned owners and deadlines; each completed action captures its evidence at completion; and board reporting reflects live remediation status. When examiners return to test responsiveness, the record of execution already exists.
See how banks keep supervisory findings on track and off the escalation ladder →
Frequently Asked Questions
Can an MRA turn into an enforcement action?
Yes, though rarely in one step. An MRA that goes unaddressed typically repeats or elevates first — to an MRIA at the Federal Reserve or a repeat MRA at the OCC — and drives rating downgrades along the way. If the record of non-responsiveness continues, agencies move to informal actions like memoranda of understanding and then to formal actions like written agreements and consent orders.
What is a repeat MRA?
A repeat MRA is a Matter Requiring Attention that appears again at a subsequent examination because the original deficiency was not adequately corrected. Regulators track repeat findings specifically and read them as a management and governance failure, since the institution committed to a correction and did not deliver it. Repeat MRAs are among the strongest predictors of downgrades and escalation.
Do unresolved MRAs affect CAMELS ratings?
Yes. Responsiveness to supervisory findings is a core consideration in the management component of the CAMELS rating, and unresolved or repeat findings weigh directly against it. Compliance-related findings that age without correction similarly pressure the consumer compliance rating. Downgrades then carry their own costs, including higher deposit insurance assessments and lost eligibility for expedited treatment.
Can regulators deny applications because of open MRAs?
Outstanding supervisory issues are a standard consideration when regulators evaluate expansionary applications such as branches, mergers, and new activities. An institution with aging or repeat findings may see applications delayed, conditioned, or discouraged until the supervisory record improves. In practice, open findings function as a brake on growth plans even before any formal denial.
Is a late or partial response treated the same as no response?
Increasingly, yes. Examiners evaluate execution, not correspondence: a response submitted on time but never implemented, or implemented only for the cited examples without addressing the root cause, is treated as non-responsiveness when the finding is retested. Proactive communication about a slipping milestone is tolerated; discovering the slip at the next exam is not.