# FDIC FIL-15-2026: Agencies Revise the Interagency Model Risk Management Guidance Source: https://www.bankingnewsai.com/ai-regulation/documents/fdic-fil-15-2026 Last updated: Aug 26, 2026 On April 17, 2026 the FDIC issued FIL-15-2026, adopting revised interagency Model Risk Management guidance jointly with the OCC and Federal Reserve and rescinding FIL-22-2017 and FIL-27-2021. The guidance sets a risk-based approach tailored to a bank's size, complexity, and model risk profile, is expected to matter most for banks above $30 billion in assets, and states that non-compliance with it will not by itself result in supervisory criticism. It replaces the 2011 framework (OCC 2011-12 / SR 11-7) that governed bank models, including machine learning, for fifteen years. ## At a glance | Field | Value | | --- | --- | | Authority | [FDIC](https://www.bankingnewsai.com/ai-regulation/fdic) | | Type | Guidance | | Status | In force | | Published | Apr 17, 2026 | | Effective | Apr 17, 2026 | | Applies to | All FDIC-supervised financial institutions; expected to be most relevant to banking organizations with more than $30 billion in total assets | | Official text | https://www.fdic.gov/news/financial-institution-letters/2026/agencies-revise-interagency-model-risk-management-guidance | ## Key points - Issued April 17, 2026 by the FDIC, OCC (Bulletin 2026-13), and Federal Reserve (SR 26-2) as a single interagency document. - Rescinds FIL-22-2017 (FDIC adoption of the 2011 Supervisory Guidance on Model Risk Management) and FIL-27-2021 (BSA/AML and OFAC model risk statement). - Applies to all FDIC-supervised institutions but is expected to be most relevant to organizations over $30 billion in total assets; banks under that size without significant or complex model use generally are not expected to apply it. - Covers model development, validation, ongoing monitoring, and governance, including expectations for third-party vendor models. - Non-prescriptive: the FIL states that non-compliance will not by itself result in supervisory criticism. - Generative and agentic AI sit outside the scope of the interagency guidance and are left to banks' broader risk-management and governance programs (see OCC Bulletin 2026-13 for the agencies' scoping language). - FDIC June 2026 testimony describes the revision as replacing 'overly prescriptive' 2011-era standards and serving as 'an avenue for the safe and sound adoption of technology.' ## What changed for banks For FDIC-supervised banks, the 2011 framework adopted through FIL-22-2017 is gone. Large banks keep the core disciplines of validation, effective challenge, and governance under a modernized, explicitly risk-based standard; community banks get clear relief unless their model use is significant or complex. The 2021 BSA/AML model-risk statement is also withdrawn, so AML/sanctions systems are now governed under the general framework. Generative and agentic AI remain an enterprise-risk-management question rather than a formal model-validation one. ## Use cases it governs - [Model risk management](https://www.bankingnewsai.com/ai-regulation/by-use-case#model-risk) - [Generative & agentic AI](https://www.bankingnewsai.com/ai-regulation/by-use-case#generative-agentic-ai) - [Third-party & vendor AI](https://www.bankingnewsai.com/ai-regulation/by-use-case#third-party-vendors) - [AML / KYC](https://www.bankingnewsai.com/ai-regulation/by-use-case#aml-kyc) - [Credit scoring & underwriting](https://www.bankingnewsai.com/ai-regulation/by-use-case#credit-underwriting) Supersedes: [FDIC FIL-27-2021](https://www.bankingnewsai.com/ai-regulation/documents/fdic-fil-27-2021), [OCC Bulletin 2011-12](https://www.bankingnewsai.com/ai-regulation/documents/occ-bulletin-2011-12), [SR 11-7](https://www.bankingnewsai.com/ai-regulation/documents/fed-sr-11-7). Same interagency text issued as: [SR 26-2](https://www.bankingnewsai.com/ai-regulation/documents/fed-sr-26-2), [OCC Bulletin 2026-13](https://www.bankingnewsai.com/ai-regulation/documents/occ-bulletin-2026-13). ## FAQ ### Does FIL-15-2026 apply to community banks? It applies to all FDIC-supervised institutions, but the FDIC says it is most relevant to banks with more than $30 billion in assets. Smaller banks are generally not expected to apply it unless their model use is significant, complex, or poses elevated risk. ### What happened to the BSA/AML model risk statement (FIL-27-2021)? FIL-15-2026 rescinds it. BSA/AML and OFAC screening models are now covered by the general revised model risk management guidance rather than a separate statement. ## Compare - [SR 11-7 vs SR 26-2](https://www.bankingnewsai.com/ai-regulation/compare/sr-11-7-vs-sr-26-2): SR 11-7 vs SR 26-2: What Changed in Bank Model Risk Guidance ## Which AI tools for banks does FDIC FIL-15-2026 apply to? - [Fraud detection](https://www.bankingnewsai.com/ai-tools/fraud-detection) — Model risk management (SR 26-2 / OCC 2026-13 / FIL-15-2026) - [AML compliance](https://www.bankingnewsai.com/ai-tools/aml-compliance) — Model risk management - [Credit decisioning](https://www.bankingnewsai.com/ai-tools/credit-decisioning) — Model risk management (SR 26-2 / OCC 2026-13 / FIL-15-2026) - [Model risk and AI governance](https://www.bankingnewsai.com/ai-tools/model-risk-governance) — Model risk management (SR 26-2 / OCC 2026-13 / FIL-15-2026) ## Related documents - [FDIC FIL-27-2021](https://www.bankingnewsai.com/ai-regulation/documents/fdic-fil-27-2021) — Interagency Statement on Model Risk Management for Bank Systems Supporting BSA/AML and OFAC Compliance (Apr 9, 2021) - [OCC Bulletin 2011-12](https://www.bankingnewsai.com/ai-regulation/documents/occ-bulletin-2011-12) — Sound Practices for Model Risk Management: Supervisory Guidance on Model Risk Management (Apr 4, 2011) - [SR 11-7](https://www.bankingnewsai.com/ai-regulation/documents/fed-sr-11-7) — Supervisory Guidance on Model Risk Management (Apr 4, 2011) - [Hill House oversight testimony (Jun 2026)](https://www.bankingnewsai.com/ai-regulation/documents/fdic-testimony-oversight-prudential-regulators-2026) — Statement of Chairman Travis Hill: Oversight of Prudential Regulators (Jun 4, 2026) - [FDIC House testimony on AI and innovation (Mar 2026)](https://www.bankingnewsai.com/ai-regulation/documents/fdic-testimony-innovation-speed-of-markets-2026) — Innovation at the Speed of Markets: How Regulators Keep Pace with Technology (Mar 26, 2026) - [FDIC 2025 Report on Cybersecurity and Resilience](https://www.bankingnewsai.com/ai-regulation/documents/fdic-cybersecurity-resilience-report-2025) — 2025 Report on Cybersecurity and Resilience (Jul 14, 2025) - [Hill 'Charting a New Course' speech](https://www.bankingnewsai.com/ai-regulation/documents/fdic-charting-new-course-speech-2025) — Charting a New Course: Preliminary Thoughts on FDIC Policy Issues (Jan 10, 2025) - [FDIC 2024 Risk Review](https://www.bankingnewsai.com/ai-regulation/documents/fdic-risk-review-2024) — 2024 Risk Review — Section 5: Operational and Cyber Risks (May 22, 2024) Last reviewed Aug 26, 2026. Cite the official text (https://www.fdic.gov/news/financial-institution-letters/2026/agencies-revise-interagency-model-risk-management-guidance) for the rule and this page for the summary and dates. --- Canonical page: https://www.bankingnewsai.com/ai-regulation/documents/fdic-fil-15-2026 Part of [BankingNewsAI](https://www.bankingnewsai.com/) — a free daily brief on AI in banking, an AI regulation tracker (41 authorities, 237 documents) and AI-strategy profiles of the 120 largest US banks. Markdown versions of every reference page: append `.md` to the page URL; index at https://www.bankingnewsai.com/llms.txt.