An MRA is a Matter Requiring Attention. An MRIA is a Matter Requiring Immediate Attention. Both are supervisory findings examiners use to communicate deficiencies that bank management must correct, but they sit at different severity levels. An MRIA is more serious, demands faster action, and signals that the regulator views the issue as a meaningful threat to the institution's condition, compliance, or risk management.
Key Takeaways:
- An MRA flags a deficiency that warrants management's attention and correction, but is not an immediate threat
- An MRIA is reserved for more serious matters that require immediate action, often because the issue is significant, unresolved, or recurring
- The Federal Reserve formally uses both terms; the OCC primarily uses MRA terminology, and the FDIC uses related supervisory recommendations and matters
- MRIAs sit one step below formal enforcement actions like consent orders
- Failing to correct an MRA, or letting it recur, is a common path to an MRIA
What Is an MRA (Matter Requiring Attention)?
A Matter Requiring Attention is a supervisory finding that identifies a deficiency in a bank's practices, controls, or compliance that management is expected to address. MRAs cover issues that are important but do not pose an immediate threat to safety and soundness or to consumers. Examples include a policy that hasn't kept pace with the institution's growth, a control gap with limited current impact, or documentation weaknesses in a compliance program.
An MRA is communicated in the report of examination or supervisory correspondence. Management is expected to develop a corrective action plan, assign ownership, and remediate within a reasonable timeframe. The board is generally expected to be aware of MRAs and to oversee their resolution. Our guide on how to respond to an MRA from the FDIC covers the response mechanics in detail.
The key characteristic of an MRA: it is a directive to fix something, but the regulator is not signaling crisis. You have time to remediate properly, and you are expected to use it.
What Is an MRIA (Matter Requiring Immediate Attention)?
A Matter Requiring Immediate Attention is the more serious designation. The Federal Reserve uses MRIAs for matters that have the potential to pose significant risk to the institution, that represent a significant departure from sound governance or risk management, that involve substantive noncompliance, or that remain uncorrected from a prior MRA. As the name states, the expectation is immediate action.
The Federal Reserve's supervisory framework describes MRIAs as matters of significant importance and urgency that the Federal Reserve requires banking organizations to address immediately. An MRIA typically demands a prompt, board-level response, a detailed remediation plan, and frequent status reporting to the supervisory team.
An MRIA is a louder signal. It tells you the regulator has lost some confidence in the institution's ability to manage the issue on its own timeline, and it raises the stakes for the next exam.
MRA vs MRIA: The Core Differences
| Dimension | MRA | MRIA |
|---|---|---|
| Severity | Deficiency requiring correction | Significant matter requiring immediate action |
| Urgency | Reasonable remediation timeframe | Immediate response expected |
| Typical trigger | Control or compliance gap, limited current impact | Significant risk, substantive noncompliance, or an uncorrected/recurring MRA |
| Board involvement | Oversight of remediation | Direct, documented board engagement |
| Proximity to enforcement | Further from formal action | One step below formal enforcement |
| Reporting cadence | Periodic status updates | Frequent, often until closed |
The practical distinction is severity and speed. Both require a corrective action plan, ownership, and evidence of correction. The MRIA simply compresses the timeline and elevates the scrutiny.
How Terminology Differs Across Regulators
The exact labels vary by agency, which is a frequent source of confusion:
- Federal Reserve: Uses both MRA and MRIA formally, with MRIA reserved for the most significant and urgent matters.
- OCC: Primarily uses Matters Requiring Attention (MRA) in its examination reports, with a defined framework for tracking and escalation. The OCC's bank supervision process describes how MRAs are documented and followed.
- FDIC: Communicates supervisory concerns through the report of examination and may use matters requiring board attention and related supervisory recommendations rather than the MRIA label.
- NCUA: Issues Documents of Resolution (DORs) and examiner findings for credit unions, which serve a similar function.
Regardless of the label, the underlying logic is the same across agencies: a graduated system that distinguishes routine deficiencies from urgent ones, with escalation when issues are significant or go uncorrected.
How an MRA Becomes an MRIA, and an MRIA Becomes Enforcement
Supervisory findings exist on a ladder. Understanding the rungs helps you keep from sliding down them.
- Examiner recommendation or observation — informal, the lightest signal
- MRA — a deficiency you are directed to correct
- MRIA — a significant or urgent matter, or an MRA you failed to correct
- Formal enforcement — a consent order, written agreement, or cease-and-desist
The most common way to move down this ladder is recurrence. An MRA that is not corrected, or that is "fixed" superficially and then reappears, frequently escalates to an MRIA. For why corrections fail to hold, see why banks get repeat exam findings. An MRIA that is not resolved can move to a formal enforcement action, which carries public disclosure and, often, growth or activity restrictions. Our explainer on what an FDIC consent order means covers that final rung.
The lesson: the cheapest place to resolve a problem is at the MRA stage, with a real root-cause fix and verified correction.
Responding to an MRA or MRIA
Whether you receive an MRA or an MRIA, the response discipline is the same; the MRIA just demands more speed and board visibility:
- Acknowledge and assign. Name an owner with authority over the underlying process, not a department.
- Root-cause the issue. Fix the process that allowed the deficiency, not just the cited examples.
- Build a corrective action plan with specific milestones and dates. Our corrective action plan template provides a structure.
- Document board oversight, especially for an MRIA, where direct board engagement is expected.
- Verify and report. Confirm the correction works on a fresh sample and report status on the cadence the examiner expects.
An MRA or MRIA is a tracking and evidence problem under a deadline. See how Canarie assigns, tracks, and evidences each finding through to verified closure →
Frequently Asked Questions
What does MRA stand for in banking?
MRA stands for Matter Requiring Attention. It is a supervisory finding that identifies a deficiency in a bank's practices, controls, or compliance that management is expected to correct within a reasonable timeframe. It is important but does not signal an immediate threat to the institution.
What does MRIA stand for?
MRIA stands for Matter Requiring Immediate Attention. It is a more serious supervisory finding used for significant or urgent matters, including deficiencies that pose meaningful risk or MRAs that were not corrected. As the name indicates, regulators expect immediate action.
Is an MRIA worse than an MRA?
Yes. An MRIA is more severe than an MRA. It indicates greater risk or urgency, requires a faster and more board-engaged response, and sits one step below formal enforcement actions such as consent orders. An uncorrected MRA often escalates into an MRIA.
Which regulators use MRA and MRIA?
The Federal Reserve formally uses both MRA and MRIA. The OCC primarily uses Matters Requiring Attention. The FDIC communicates similar supervisory concerns through examination reports and recommendations, and the NCUA uses Documents of Resolution for credit unions. The severity logic is consistent across agencies.
How long do you have to respond to an MRA?
There is no single fixed deadline; the timeframe depends on the issue's severity and the examiner's expectations, communicated in the examination report or correspondence. An MRA allows a reasonable remediation period, while an MRIA requires immediate action and frequent status reporting.
Turn Findings Into Verified Closure
The difference between an MRA that gets resolved and one that escalates into an MRIA is rarely effort. It's whether the correction addressed the root cause, was verified, and was documented in a way the examiner can confirm.
Canarie tracks every MRA and MRIA from issuance through assigned ownership, root-cause remediation, and verification evidence, with board-ready reporting built in. When the examiner reviews the status of prior findings, the proof is already assembled.