The exam cycle for community banks is not random, but many compliance officers treat it like a surprise. FDIC examination frequency is governed by statute, modified by risk profile, and coordinated with state regulators under alternating exam agreements. Knowing where your institution falls in this framework determines whether you have twelve months to prepare or six.
Key Takeaways:
- Banks under $3 billion in assets with strong ratings get an 18-month exam cycle; all others are on a 12-month cycle
- CAMELS composite ratings of 1 or 2 qualify for the extended cycle, a 3 or worse triggers annual exams
- The FDIC and state regulators alternate full-scope exams, meaning you face a regulatory exam roughly every 6-9 months
- Risk-based triggers like rapid growth, new products, or enforcement actions can accelerate your next exam regardless of the standard schedule
The Statutory Exam Cycle: 12 Months vs. 18 Months
The Federal Deposit Insurance Act, codified at 12 U.S.C. § 1820(d), establishes the baseline examination frequency for insured depository institutions. The default cycle is a full-scope safety and soundness examination every 12 months.
However, Congress has provided relief for well-managed community banks. Under the current statute, institutions that meet all of the following criteria qualify for an extended 18-month cycle:
- Total assets of less than $3 billion
- CAMELS composite rating of 1 or 2 at the most recent examination
- Not subject to a formal enforcement action
- Not undergoing a change in control
- No material loss to the Deposit Insurance Fund since the last examination
The $3 billion threshold was raised from $1 billion by the Economic Growth, Regulatory Relief, and Consumer Protection Act of 2018 (S.2155), significantly expanding the number of banks eligible for the extended cycle. If your bank sits between $1 billion and $3 billion in total assets and carries a clean supervisory record, you gained an extra six months of breathing room.
This matters for exam preparation planning. An 18-month cycle gives your compliance team more runway, but only if you use it proactively rather than waiting until month 16 to start pulling documents.
How Alternating Exams Work
Most community banks are state-chartered and FDIC-insured but not Federal Reserve members. For these institutions, the FDIC shares supervisory responsibility with the state banking department. In practice, the agencies alternate: one full-scope exam is conducted by the FDIC, and the next by the state regulator.
This alternating arrangement is governed by agreements between the FDIC and individual state banking departments. The practical effect: even on an 18-month statutory cycle, you may face an examination every 9 months because the FDIC and state exams are offset.
For example, if the FDIC conducts a full-scope exam in January 2026, your state regulator might conduct their exam in October 2026, and the FDIC returns in July 2027. The regulatory burden doesn't actually halve, it alternates.
There are key differences between FDIC and state exams:
- Scope: FDIC exams follow the FDIC Risk Management Manual of Examination Policies. State exams follow the state's own manual, though most states use the FFIEC Uniform Financial Institutions Rating System (CAMELS/UFIRS) for consistency.
- Focus areas: State examiners may emphasize state-specific laws (e.g., state consumer protection statutes, state licensing requirements). FDIC examiners focus on federal compliance and safety and soundness.
- Report of Examination: Both agencies issue separate Reports of Examination, each carrying independent weight. A finding from a state exam is not less significant than one from the FDIC.
Community banks need to maintain readiness for both agencies. The document expectations largely overlap, but state-specific items (like compliance with state usury laws or lending-specific statutes) require separate preparation.
What Triggers an Accelerated Exam Cycle
The 12- or 18-month cycle is a maximum interval, not a guarantee. Several factors can cause the FDIC to schedule an examination sooner:
Deteriorating financial condition. If call report data shows declining capital ratios, rising nonperforming assets, or liquidity stress, the FDIC's off-site monitoring systems (particularly the Statistical CAMELS Off-site Rating system, or SCOR) will flag the institution for early review.
CAMELS downgrade. A composite rating of 3, 4, or 5 automatically places the institution on a 12-month cycle. A rating of 4 or 5 may trigger even more frequent monitoring, including targeted visitations between full-scope exams.
Rapid asset growth. Banks growing at more than 10-15% annually draw supervisory attention. Rapid growth funded by volatile liabilities (brokered deposits, wholesale funding) is a particular red flag that may prompt an interim visit.
New business lines or products. Launching a fintech partnership, entering cryptocurrency-related banking, or adding a significant new lending product line can trigger a targeted examination or accelerate the next full-scope exam.
BSA/AML concerns. FinCEN referrals, law enforcement inquiries, or a spike in SAR filings can trigger an accelerated BSA-specific examination independent of the safety and soundness cycle. The BSA/AML exam follows its own examination procedures under the FFIEC BSA/AML Examination Manual.
Formal or informal enforcement actions. Consent orders, cease-and-desist orders, or even memoranda of understanding typically include provisions for follow-up examination to assess compliance with the action's terms.
Exam Types Beyond Safety and Soundness
The 12/18-month cycle applies to full-scope safety and soundness examinations. But community banks also face other exam types on separate schedules:
Consumer compliance exams assess adherence to consumer protection laws (TILA, RESPA, ECOA, FCRA, EFTA, UDAAP). The frequency depends on the institution's consumer compliance rating and risk profile. Banks with satisfactory ratings and limited consumer product complexity may see compliance exams every 36-48 months. Higher-risk institutions face them more frequently.
BSA/AML exams are typically conducted concurrently with the safety and soundness exam but follow the separate FFIEC BSA/AML Examination Manual. In some cases, the FDIC will conduct a standalone BSA exam if concerns arise between full-scope cycles.
CRA exams evaluate the bank's record of meeting the credit needs of its entire community, including low- and moderate-income neighborhoods. CRA exam frequency varies widely, small banks (under $376 million in assets as of 2026) may go 48-60 months between CRA exams. Understanding CRA reporting requirements is essential regardless of when your next CRA exam falls.
IT/cybersecurity exams may be conducted as part of the safety and soundness examination or as a standalone review, particularly for banks with significant technology operations or third-party technology dependencies.
The practical implication: in any given 18-month period, a community bank might face a safety and soundness exam, a consumer compliance exam, and a targeted BSA review. Treating exam preparation as a single event misses the reality of overlapping supervisory activities.
How to Use Your Exam Cycle Strategically
Knowing your cycle length is only useful if it drives your preparation rhythm. Here's how to align your compliance program to the exam schedule:
Month 1-3 post-exam: Remediate findings from the most recent Report of Examination. Document every corrective action, including the date completed, who was responsible, and what evidence supports the remediation. Examiners at the next exam will ask specifically about prior findings, unresolved items are treated as repeat findings, which carry significantly more weight.
Month 4-9: Conduct your internal compliance program activities: annual risk assessment updates, policy reviews, training refreshers, and independent compliance testing. This is where continuous evidence capture matters. If your team completes compliance monitoring activities but doesn't document them contemporaneously, you'll struggle to prove it happened during exam prep.
Month 9-12 (or 9-15 on an 18-month cycle): Begin exam-specific preparation. Pull together your exam document request materials, conduct a self-assessment gap analysis, and brief your board on exam expectations. This shouldn't be a scramble if evidence has been captured throughout the cycle.
Month 12-18: If you're on the extended cycle, don't treat the extra months as a gift for procrastination. Use them for deeper self-assessment and remediation of issues found during internal testing.
How Canarie Helps Banks Stay Exam-Ready Year-Round
The gap between knowing your exam cycle and actually being prepared when the exam arrives is an evidence problem. Compliance officers know what they need to do, the challenge is proving it happened, on schedule, with the right documentation.
Canarie maps your compliance obligations to executable tasks and captures evidence as work is completed, not weeks later when the exam is announced. When the FDIC or state examiner sends the pre-exam document request, your evidence is already organized by regulation and exam area, with timestamps proving when each obligation was fulfilled.
See how Canarie keeps your bank exam-ready on a continuous basis →
Frequently Asked Questions
How often does the FDIC examine banks under $1 billion in assets?
Banks under $1 billion with CAMELS composite ratings of 1 or 2 and no outstanding enforcement actions qualify for the extended 18-month examination cycle under 12 U.S.C. § 1820(d). The same applies to banks between $1 billion and $3 billion that meet the same criteria. If your rating slips to a 3 or worse, you revert to the standard 12-month cycle.
Do state exams count toward the FDIC exam cycle?
State examinations conducted under an alternating exam agreement satisfy the statutory examination requirement. The FDIC recognizes state exams as equivalent for scheduling purposes. However, the FDIC retains authority to conduct its own examination at any time if it determines one is necessary, regardless of when the state last examined the institution.
Can the FDIC examine my bank before the 12- or 18-month cycle is up?
Yes. The statutory cycle is a maximum interval, not a minimum. The FDIC can schedule an examination at any time based on off-site monitoring indicators, referrals, complaints, or supervisory concerns. Rapid growth, deteriorating financial performance, BSA/AML concerns, and changes in management or ownership are common triggers for accelerated exams.
What happens if our CAMELS rating changes between exams?
A CAMELS downgrade at any examination, whether conducted by the FDIC or the state, affects your exam cycle immediately. A downgrade to a composite 3 moves you to a 12-month cycle. A downgrade to 4 or 5 may result in more frequent monitoring, including interim visits and targeted examinations on specific risk areas. The cycle doesn't reset until you receive an improved rating at a subsequent exam.