Financial institutions prepare for recurring compliance exams without last-minute scrambling by making exam readiness a byproduct of execution: every control cycle captures its own evidence at completion, so the exam binder assembles itself continuously instead of being built in the six weeks before fieldwork. The supporting disciplines are knowing your exam clock, maintaining the standing request list as a living folder, aligning control cadences with exam windows, and self-assessing quarterly against the last report of examination.
Key Takeaways:
- Exam readiness is a property of how work is executed, not a project that starts when the exam is announced
- Examination cycles are predictable — 12 or 18 months for most institutions — so the next first-day letter has an approximate date today
- Prior exam document requests predict the next ones; maintain them as living folders rather than one-time productions
- Quarterly self-assessment against the last ROE and open findings catches gaps while there is still time to close them
- When readiness is continuous, the 30-day pre-exam window is for confirming, not creating
Know Your Exam Clock
Examinations recur on schedules set by statute and regulation, which means the next one has an approximate date right now. Most insured banks are examined every 12 months, and under the FDIC's examination frequency rule, 12 CFR § 337.12, well-capitalized, well-managed institutions with composite ratings of 1 or 2 and total assets under $3 billion qualify for an 18-month cycle. The FDIC's Risk Management Manual of Examination Policies describes how examination frequency and scheduling work in practice, and the NCUA similarly runs extended examination cycles for well-run federal credit unions.
Work backward from that date. If the last exam closed in March and you are on an 18-month cycle, the next first-day letter lands around late next year — which fixes, today, the periods your evidence must cover. Institutions supervised by the FDIC can pin the pattern down further with our guide to how often the FDIC examines community banks.
Maintain the Standing Request List as a Living Folder
The single best predictor of your next document request is your last one. First-day letters change at the margins, but the core asks recur every cycle: policies and their approval dates, board and committee minutes, risk assessments, monitoring and audit reports, training records, complaint logs, prior findings and their remediation status.
Instead of treating the last production as a one-time event, convert it into a standing request list: a maintained structure where each recurring request has a home, and each home is refreshed as new periods complete. When the quarterly BSA report is finished, it is filed where the exam response will need it — in the same motion, not eleven months later. Our breakdown of the FDIC exam document request list covers what those core asks typically include.
Align Control Cadences With Exam Windows
Evidence has a shape: it covers periods. A quarterly review produces four artifacts a year; an annual risk assessment produces one. Design those cadences so complete periods exist when the exam window opens.
The failure mode this prevents is the almost-complete cycle: an annual policy review scheduled for the month fieldwork begins, or a training campaign whose completion records will not exist until after the first-day letter is due. When setting or revising control schedules, check them against the exam clock — a two-month shift in a review date can be the difference between showing a completed cycle and explaining an open one.
Self-Assess Quarterly Against the Last ROE
Once a quarter, read your last report of examination the way the next examiner will. For each prior finding: is the corrective action complete, validated, and still operating? For each area the last exam probed: does the current period's evidence exist, and would it satisfy the same question? For anything new since the last exam — products, vendors, growth — has the program actually extended to cover it?
This is a half-day discipline that replaces the worst exam-time discovery: the gap found after the first-day letter, when it is too late to fix. It also produces a natural board reporting artifact, and board minutes showing quarterly readiness review are themselves evidence of the governance examiners assess. Our guide to self-assessing your compliance program before an exam provides a structure worth running every quarter, not just before fieldwork.
The 30-Day Pre-Exam Checklist: Confirm, Don't Create
When readiness is continuous, the month before the exam looks nothing like a scramble. The checklist becomes confirmation:
- Verify the standing request list is current through the most recent complete period
- Pull the open findings register and confirm each status is accurate and evidenced
- Refresh the board on exam timing, scope expectations, and prior-finding status
- Brief the staff who will interact with examiners on logistics and document flow
- Assemble the first-day letter response from folders that already exist
Nothing on that list creates evidence. That is the point — creation happened all year, at completion, one cycle at a time.
Scramble vs. Continuous: Two Exam Prep Timelines
The same examination, approached two ways:
| Phase | The Scramble | Continuous Readiness |
|---|---|---|
| 12 months out | Exam is a distant abstraction | Control cadences aligned to the exam window; evidence filing as cycles complete |
| Each quarter | Normal work, undocumented gaps accumulating | Half-day self-assessment against last ROE; findings register updated |
| First-day letter arrives | Reconstruction begins: weeks of locating, chasing, rebuilding | Response assembled from standing folders in days |
| 2 weeks out | Gaps discovered, too late to fix | Staff briefing and logistics |
| Fieldwork | Producing documents late, answering from memory | Producing documents on request, answering from the record |
| After the exam | Findings for unprovable work; vows to start earlier next time | Findings limited to substantive issues, not documentation failures |
The left column is not a discipline failure; it is what any team gets when evidence is created separately from work. The right column is what falls out when the two are the same motion.
How Modern Teams Make Readiness Continuous
Continuous readiness is simple to describe and hard to sustain manually, because it depends on hundreds of small filing and capture decisions happening correctly all year. That is a systems problem, not a willpower problem.
Canarie runs each compliance obligation as a recurring workflow: the task comes due on its designed cadence, the owner completes it, and the evidence attaches at completion — timestamped and linked to the requirement it satisfies. The standing request list stays current as a side effect, and the readiness picture the board sees is the same record the examiner will. The exam binder assembles itself because it was never a binder; it was how the work got done.
See how banks stay exam-ready between examinations →
Frequently Asked Questions
How often are banks examined?
Most insured banks receive a full-scope examination every 12 months. Under the FDIC's examination frequency rule at 12 CFR § 337.12, well-capitalized, well-managed institutions with composite ratings of 1 or 2 and under $3 billion in total assets qualify for an 18-month cycle. Specialty examinations — BSA/AML, consumer compliance, IT — run on their own schedules, and the NCUA operates extended cycles for well-run credit unions.
How do financial institutions prepare for recurring compliance exams?
The institutions that avoid scrambling treat readiness as a continuous state: control cycles capture their own evidence at completion, prior exam document requests are maintained as living folders, and a quarterly self-assessment against the last report of examination catches gaps early. Under that model, the weeks before an exam are spent confirming the record exists rather than creating it.
What is a standing request list?
A standing request list is the institution's maintained version of its recurring exam document requests: every item examiners asked for last cycle, kept as an organized structure that is refreshed as each new period completes. Because first-day letters repeat their core asks cycle after cycle, a current standing list converts the document production from a multi-week project into a short assembly task.
How far in advance should exam preparation start?
Structurally, at the close of the previous exam — that is when control cadences should be aligned to the next window and the request list converted into living folders. As a practical checkpoint, quarterly self-assessments carry the load during the cycle, and a confirmation-focused checklist covers the final 30 days. If preparation is starting when the exam is announced, the available time can no longer fix evidence gaps, only discover them.
What does it mean to be exam-ready?
Exam-ready means the institution can produce, on request and without reconstruction, current evidence that its required work happened: completed control cycles, documented reviews, board oversight in the minutes, and open findings with accurate, evidenced status. It is a property of how the program runs day to day — if readiness only exists during examinations, it is not readiness, it is performance.