An MRIA (Matter Requiring Immediate Attention) is the Federal Reserve's most serious category of supervisory finding short of a formal enforcement action. Examiners communicate MRIAs in reports of examination and supervisory letters when a deficiency poses significant risk to the institution, involves substantive noncompliance with laws or regulations, or has persisted uncorrected from a prior exam, and they require the board of directors to address it immediately. Receiving one means the regulator has decided the issue can no longer wait for a normal remediation cycle.
Key Takeaways:
- MRIA stands for Matter Requiring Immediate Attention, the Federal Reserve's highest-severity supervisory finding below formal enforcement
- The term is defined in Federal Reserve SR letter 13-13/CA 13-10, which governs how examiners communicate supervisory findings
- MRIAs are directed to the board of directors, not just management, and require a documented corrective response on an immediate timeline
- Other agencies use different labels: the OCC issues MRAs, the FDIC uses Matters Requiring Board Attention (MRBA), and the NCUA issues Documents of Resolution (DOR)
- An MRIA is not itself an enforcement action, but an unresolved MRIA is one of the most direct paths to one
Where the Term MRIA Comes From: SR 13-13/CA 13-10
MRIA is Federal Reserve terminology. It was formalized in SR 13-13/CA 13-10, "Supervisory Considerations for the Communication of Supervisory Findings", issued in June 2013. That letter established two categories for supervisory findings that require corrective action: Matters Requiring Attention (MRAs) and Matters Requiring Immediate Attention (MRIAs).
Under SR 13-13, MRIAs are matters of significant importance and urgency that the Federal Reserve requires banking organizations to address immediately. The language is deliberately directive. MRIAs are written as requirements, not recommendations, and the timeframe for action is stated within the finding itself.
The letter also standardized where these findings appear and who owns them. MRIAs and MRAs are communicated in the report of examination or inspection, or in a supervisory letter, and both are directed to the board of directors for corrective action.
MRIA vs MRA: How Severity Is Divided
The Federal Reserve draws the line based on urgency and potential harm. An MRA covers a deficiency that is important and must be corrected, but over a reasonable timeframe; the institution remediates in the normal course with board oversight. An MRIA covers matters that could cause significant harm to the institution or its customers if left unaddressed, or matters that have already persisted through a prior supervisory cycle without adequate correction.
Three things typically separate an MRIA from an MRA in practice: the immediacy of the required response, the depth of board engagement expected, and the proximity to enforcement if the matter stalls. For a full side-by-side breakdown of the two categories, see our comparison of MRA vs MRIA definitions and differences.
What Triggers an MRIA?
SR 13-13 describes the circumstances that warrant the MRIA designation:
- Significant risk. Matters that have the potential to pose significant risk to the safety and soundness of the banking organization
- Substantive noncompliance. Matters that represent significant noncompliance with applicable laws or regulations
- Repeat criticism. Matters previously communicated as MRAs that have escalated in importance because the institution's attention or action was insufficient
That third trigger deserves emphasis. Many MRIAs are not new problems. They are old MRAs the institution believed it had resolved, where the fix addressed the symptom but not the cause, or where remediation was promised and never fully executed. Repeat findings tell the examiner that management's word and management's follow-through have diverged, which is why the designation escalates.
MRIAs can arise in any risk area: BSA/AML program weaknesses, liquidity and interest rate risk management, IT and cybersecurity gaps, consumer compliance breakdowns, or credit administration failures. The subject matter varies; the urgency signal is constant.
Which Regulators Use the Term MRIA?
Searchers apply "MRIA" loosely across agencies, but only the Federal Reserve formally issues MRIAs. Each federal banking regulator has its own label for serious supervisory findings:
| Agency | Terminology | Where It Appears |
|---|---|---|
| Federal Reserve | MRA and MRIA | Reports of examination or inspection and supervisory letters, per SR 13-13/CA 13-10 |
| OCC | MRA only | Reports of examination, documented in the "Five Cs" format under OCC Bulletin 2014-52 |
| FDIC | Matters Requiring Board Attention (MRBA) | Reports of examination |
| NCUA | Documents of Resolution (DOR) | Examination reports for credit unions |
The OCC's Bulletin 2014-52 describes how its examiners document each MRA using five elements: Concern, Cause, Consequence, Corrective action, and Commitment. The OCC does not use an MRIA tier; urgency is conveyed through the MRA itself and the supervisory response that follows it.
The practical point: if an FDIC examiner writes an MRBA into your report of examination, or an NCUA examiner issues a DOR, the label differs but the expectation is the same. The board owns the finding, and correction must be demonstrated, not just described.
What Receiving an MRIA Means in Practice
Board accountability comes first. SR 13-13 directs findings to the board of directors, and examiners expect board minutes to show that the MRIA was presented, discussed, and assigned, not merely received. Passive acknowledgment in a consent agenda is itself a red flag.
A written response with specific commitments follows. The response should identify the root cause, describe the corrective actions, name accountable owners, commit to completion dates, and explain any interim controls deployed while the permanent fix is built. Our guide on how to respond to an MRIA covers the response structure in detail.
"Immediately" is defined by the finding. The Federal Reserve states the required timeframe in the finding itself. For some MRIAs, immediate means interim risk mitigation within days; for others, it means a corrective plan on the examiner's desk within weeks. What it never means is waiting for the next examination cycle.
Closure requires validation, not assertion. The finding stays open until examiners verify that the corrective action was implemented and works. That verification happens through follow-up reviews or at the next examination, and it depends on evidence the institution can produce. The MRA closure process walks through each stage from finding to verified closure.
Is an MRIA a Step Toward Enforcement?
An MRIA is not an enforcement action. It is a confidential supervisory finding, communicated in non-public examination materials, and it carries no public disclosure, penalties, or legal restrictions by itself.
It is, however, the last rung on the ladder before enforcement. An MRIA that is not addressed on the required timeline, or that is addressed superficially, gives the regulator a documented record of unheeded direction. That record supports escalation to informal actions such as memoranda of understanding and board resolutions, and then to formal actions such as written agreements and cease-and-desist orders. Institutions that resolve MRIAs credibly, with root-cause fixes and verifiable evidence, almost always stay off that path.
How Modern Compliance Teams Track MRIAs to Closure
The institutions that struggle with MRIAs usually don't lack urgency. They lack a system: the corrective plan lives in a document, the execution lives in email, the evidence lives in scattered folders, and nobody can show the board or the examiner a single current picture of where the finding stands.
Canarie treats each supervisory finding as a tracked workflow: corrective actions become assigned tasks with owners and deadlines, every completed step captures its evidence at the moment of completion, and board reporting draws from the same record examiners will eventually review. When the follow-up review arrives, the closure package already exists.
See how banks keep supervisory findings moving toward verified closure →
Frequently Asked Questions
What does MRIA stand for in banking?
MRIA stands for Matter Requiring Immediate Attention. It is the Federal Reserve's designation for its most serious supervisory findings short of formal enforcement, defined in SR letter 13-13/CA 13-10. An MRIA is communicated in the report of examination or a supervisory letter and requires the board of directors to take immediate corrective action.
What is the difference between an MRA and an MRIA?
Both are Federal Reserve supervisory findings, but they differ in severity and urgency. An MRA identifies a deficiency the institution must correct over a reasonable timeframe, while an MRIA covers matters that pose significant risk, involve substantive noncompliance, or repeat a prior uncorrected MRA, and it requires immediate action. An MRIA also demands deeper board engagement and sits one step closer to enforcement.
How quickly must a bank respond to an MRIA?
The required timeframe is stated in the finding itself, which is what "immediate" means in practice. Some MRIAs require interim risk mitigation within days, while others require a corrective action plan and board response within a few weeks. None of them permit waiting until the next examination cycle, and examiners expect frequent status reporting until the matter is closed.
Does the FDIC issue MRIAs?
No. MRIA is Federal Reserve terminology. The FDIC communicates its most serious examination concerns as Matters Requiring Board Attention (MRBA) in the report of examination. The severity logic is similar, and FDIC-supervised banks should treat an MRBA with the same board-level urgency a Fed-supervised institution would give an MRIA.
Is an MRIA an enforcement action?
No. An MRIA is a confidential supervisory finding, not a public enforcement action, and it carries no penalties or legal restrictions on its own. However, it is the most serious finding a Federal Reserve examiner can issue short of enforcement, and an MRIA that goes unresolved is one of the most common precursors to informal agreements, written agreements, and consent orders.