July 2025 Financial Reporting, Governance, and Risk Management

| 7/25/2025
July 2025 Financial Reporting, Governance, and Risk Management

Dear FIEB readers,

Whether you were attending a cookout, watching fireworks, or spending other quality time with family and friends, we hope the Fourth of July holiday provided relaxation.

With the second quarter of 2025 in the rearview mirror, we are seeing stable to strong earnings from published results. In Washington, D.C., the focus continues to be on burden reduction. The federal banking agencies and the National Credit Union Administration both are seeking comment on proposals to further reduce burden under the Economic Growth and Regulatory Paperwork Reduction Act of 1996. The Federal Deposit Insurance Corp. board approved a notice of proposed rulemaking to raise and index key regulatory thresholds, including those under the Federal Deposit Insurance Corporation Improvement Act of 1991. Federal banking agencies are proposing to rescind 2023 Community Reinvestment Act final rule.

Two of the largest American Institute of Certified Public Accountants (AICPA) conferences for our industry are just around the corner. This year, the AICPA banking conference and AICPA credit unions conference will occur concurrently Sept. 15-17, 2025, at the Gaylord National Resort & Convention Center, National Harbor, Maryland, just south of Washington, D.C. Here are the discount codes:

  • The 2025 national AICPA & CIMA Conference on Banks & Savings Institutions. Use the code “BAN25” to save $100 on the in-person or the virtual option. This discount may be applied in addition to the early bird discount of $150 – for a total savings of $250 off the regular registration fee – for those who register by Friday, Aug. 1, 2025.
  • The 2025 AICPA & CIMA Conference on Credit Unions. Use the code “CU25” to save $100 on the in-person or the virtual option. This discount may be applied in addition to the early bird discount of $150 – for a total savings of $250 off the regular registration fee – for those who register by Friday, Aug. 1, 2025.

We hope to see you in September. We look forward to keeping you informed and welcome any feedback.

Financial Institutions Executive Briefing
Get updates on accounting, governance, risk management, and compliance issues.
From the federal financial institution regulators

OCC highlights key risks in banking system

On June 30, 2025, the Office of the Comptroller of the Currency (OCC) released its “Semiannual Risk Perspective” highlighting key risks to the federal banking system, including credit, market, operational, and compliance risks. The report underscores the increase in commercial credit risk, particularly within the commercial real estate sector, due to growing geopolitical risks, sustained higher interest rates, and broad uncertainty.

Federal banking agencies seek further comment to reduce burden

On July 21, 2025, the Federal Deposit Insurance Corp. (FDIC), Federal Reserve Board (Fed), and OCC jointly issued their fourth notice requesting public comment to reduce regulatory burden under the Economic Growth and Regulatory Paperwork Reduction Act of 1996 (EGRPRA). The agencies are soliciting comments on the three remaining of the 12 categories: banking operations, capital, and the Community Reinvestment Act (CRA).

Comments are due Oct. 23, 2025.

NCUA issues notice of EGRPRA review

On July 10, 2025, the National Credit Union Administration (NCUA) announced the next steps in its plans to voluntarily review agency regulations to identify outdated, unnecessary, and unduly burdensome rules for federally insured credit unions. The review, which will be conducted over the course of approximately two years, is part of the EGRPRA.

FDIC proposes to raise asset thresholds

On July 15, 2025, the FDIC board approved a notice of proposed rulemaking to raise and index key regulatory thresholds, including those under 12 CFR Part 363, which is the regulation to implement Section 112 of the Federal Deposit Insurance Corporation Improvement Act of 1991 (FDICIA). The FDICIA subjects institutions above a certain asset size threshold to annual independent audits, assessments of the effectiveness of internal control over financial reporting, and compliance with designated laws and regulations, as well as related reporting requirements. It also includes requirements for audit committees. Many thresholds have not been updated in decades. The proposal would adjust the thresholds for cumulative inflation since adoption or last revision, with automatic reviews every two years or sooner if inflation exceeds 8%.

The comment period will be open for 60 days after publication in the Federal Register.

Federal banking agencies propose to rescind 2023 CRA final rule

On July 16, 2025, the FDIC, OCC, and Fed jointly issued a proposal to rescind the CRA final rule issued in October 2023. Prior CRA regulations that were originally adopted in 1995, with certain technical amendments, would replace the final rule.

OCC removes references to disparate impact

On July 14, 2025, the OCC announced it is removing references to supervising banks for disparate impact liability from the “Fair Lending” booklet of the “Comptroller’s Handbook” and has begun removing references in other issuances. In addition, the OCC has instructed its examiners that they should no longer examine for disparate impact.

OCC acting Comptroller Rodney Hood releases letter on preemption

On June 9, 2025, acting Comptroller of the Currency Rodney Hood released a letter in response to the Conference of State Bank Supervisors request that the OCC rescind its preemption regulations. In the letter, Hood stated that the OCC’s regulations align with federal law, Supreme Court precedent, and recent executive orders and emphasized that federal preemption supports a dual banking system where federally and state-chartered banks operate alongside each other. Hood concluded that the agency’s preemption regulations are lawful and contribute to the efficiency and effectiveness of the national banking system.

Federal banking agencies issue joint statement on crypto asset safekeeping

On July 14, 2025, the FDIC, OCC, and Fed issued a joint statement on risk management considerations for crypto asset safekeeping. The statement reaffirms a bank’s ability to engage in crypto asset safekeeping and highlights specific risk considerations such as cryptographic key management, legal and compliance risks, third-party risk management, and audit practices.

Agencies allow financial institutions to source TINs from third parties

On June 27, 2025, the FDIC, OCC, and NCUA, with concurrence from the Financial Crimes Enforcement Network, issued in an FDIC press release, OCC News Release 2025-60, and an NCUA press release an order allowing banks and credit unions to obtain customers’ taxpayer identification numbers (TINs) from third-party sources instead of directly from the customers.

FDIC publishes compliance summary

On July 3, 2025, the FDIC issued the 2025 edition of its “Consumer Compliance Supervisory Highlights,” summarizing key consumer compliance issues observed during 2024. The most frequently cited violations involved the Truth in Lending Act (Regulation Z), Flood Disaster Protection Act, Truth in Savings Act (Regulation DD), Electronic Fund Transfer Act (Regulation E), and Home Mortgage Disclosure Act (Regulation C). Consumer complaints processed by the FDIC increased 14% over the previous year.

CFPB rescinds overdraft fee settlement

On July 1, 2025, the Consumer Financial Protection Bureau (CFPB) withdrew a $95 million enforcement action against the Navy Federal Credit Union related to overdraft fee practices. The original settlement, issued under prior leadership, alleged the credit union charged fees without proper consent. The rescission reflects a broader rollback of regulatory actions under the bureau’s current leadership.

Agencies seek comment on payment and check fraud

On June 16, 2025, the FDIC, OCC, and Fed requested comment on potential actions to help consumers, businesses, and financial institutions mitigate risk of payment fraud, with a particular focus on check fraud.

Comments are due Sept. 18, 2025.

Fed releases results of annual stress test

On June 27, 2025, the Fed stated that the results of the annual bank stress test showed that large banks are well positioned to weather a severe recession while staying above minimum capital requirements and continuing to lend to households and businesses. Under this year’s hypothetical recession, the aggregate decline in the common equity tier 1 capital ratio is 1.8%.

Fed requests comment on proposal to revise rating framework for large bank holding companies

On July 10, 2025, the Fed proposed revisions to its supervisory rating framework for large bank holding companies. The aim is to better assess whether these institutions are “well managed.” The proposed changes focus on enhancing the evaluation of governance and risk management practices, ensuring they align with the complexity and risk profile of each firm.

Comments are due Aug. 14, 2025.

Agencies propose capital and leverage reforms for GSIBs

On June 27, 2025, the FDIC, OCC, and Fed requested comment on a proposal to modify the enhanced supplementary leverage ratio standards, which apply to global systemically important bank holding companies (GSIBs) in the U.S. and their depository institution subsidiaries. The proposal would tie the enhanced supplementary ratio to the banking organization’s systemic risk profile, amongst other recommendations.

Comments are due Aug. 26, 2025.

From the Securities and Exchange Commission (SEC)

SEC files response to court request on climate disclosure rules 

On July 23, 2025, the SEC responded to an April 2025 8th U.S. Circuit Court of Appeals request for information on whether the SEC intended to review or reconsider its climate-related disclosure rules. The request followed the SEC’s March 2025 decision to discontinue its defense of related litigation challenging those rules. In its July 2025 filing, the SEC asked the court to proceed with the litigation and to decide the case. The SEC also indicated the court’s decision would inform the SEC’s future action on the rules. Commissioner Caroline Crenshaw provided a related statement.

SEC updates Financial Reporting Manual

On July 2, 2025, the Division of Corporation Finance (CorpFin) announced updates to the Financial Reporting Manual to reflect amendments to the SEC’s disclosure rules. The update incorporates changes to Regulation S-X Acquisition Rules 3-05, 3-14, 8-04, and 8-06, which now consolidate into Section 2900. Additional revisions were made to reflect the 2020 amendments to Rules 3-10 and 3-16 relating to financial disclosures for guaranteed securities.

CorpFin noted that the current update does not include revisions related to other rulemakings, including those on the qualifications of accountants, management’s discussion and analysis, selected financial data, supplementary financial information, special purpose acquisition companies, shell companies, and projections.

SEC holds executive compensation disclosure roundtable

On June 26, 2025, the SEC hosted a roundtable to discuss executive compensation disclosure. Chair Paul Atkins and commissioners Hester Peirce and Mark Uyeda emphasized that disclosure requirements should prioritize material, decision-useful information for investors. Crenshaw added that rules should promote transparency, comparability, and investor focus while being regularly assessed for materiality, cost, and alignment with long-term value creation.

SEC hosts DeFi regulation roundtable

On June 9, 2025, the SEC hosted a roundtable on decentralized finance (DeFi), featuring remarks from Atkins and commissioners Peirce, Crenshaw, and Uyeda. Atkins and Uyeda emphasized the need for regulatory frameworks that address risk while enabling innovation. Peirce noted that DeFi code is protected under the First Amendment, though individuals operating platforms that facilitate securities transactions may still fall within the SEC’s jurisdiction. Crenshaw cautioned that DeFi must be grounded in clear investor protections.

SEC commissioner comments on tokenized securities

On July 9, 2025, Peirce issued a statement reflecting on the evolving conversation around tokenized securities. She noted that while blockchain technology may enhance capital formation and collateral efficiency, the core legal and regulatory principles remain unchanged and must guide innovation in this space. Peirce encouraged market participants to engage proactively with staff when developing tokenization models.

CorpFin issues guidance on disclosures for crypto asset ETPs

On July 1, 2025, CorpFin issued a statement outlining key disclosure considerations for crypto asset exchange-traded products (ETPs). The guidance emphasizes the importance of providing clear and comprehensive disclosures related to ETPs such as custody arrangements, net asset value calculation methodologies, risk factors, and other material aspects of the offering.

SEC publishes data on broker-dealers, M&A activity, and BDCs

On June 26, 2025, the SEC’s Division of Economic and Risk Analysis released updated data on broker-dealers, merger and acquisition (M&A) activity, and business development companies (BDCs). The report highlights continued consolidation among broker-dealers and provides insights into regulatory and registration trends for M&A advisers and BDCs.

SEC extends daily reserve computation rule compliance date

On June 25, 2025, the SEC extended the compliance date to June 30, 2026, from Dec. 31, 2025, for amendments requiring certain broker-dealers to perform daily customer reserve computations. Atkins stated the extension is intended to provide firms adequate time to implement and test operational changes without undue burden.

SEC committee continues to discuss Regulation A

The SEC’s Small Business Capital Formation Advisory Committee met on July 22, 2025, to finalize its review of Regulation A and examine the regulatory framework for “finders.” The meeting also focused on potential enhancements to support small business capital formation, particularly for founders operating outside traditional capital hubs.

From the Public Company Accounting Oversight Board (PCAOB)

PCAOB Chair Erica Williams departs

On July 15, 2025, Erica Williams, PCAOB chair since January 2022, announced her departure as of July 22, 2025. During her tenure, Williams led the PCAOB in finalizing seven projects addressing 24 rules and standards, enhancing enforcement efforts with record-breaking penalties, and improving international audit oversight – most notably by gaining historic access to inspect and investigate firms in China. The PCAOB described this period as one of record accomplishments in advancing investor protection and audit quality.

SEC names George Botic as PCAOB acting chair

On July 21, 2025, the SEC announced the designation of George Botic to serve as acting chair. Botic became a PCAOB board member on Oct. 25, 2023. Prior to joining the board, he was the director of the PCAOB’s Division of Registration and Inspections.

SEC chair calls for PCAOB candidates 

On July 23, 2025, SEC Chair Paul Atkins announced he is soliciting candidates for all five PCAOB positions, including the chair. Applications are due Aug. 25, 2025. 

PCAOB addresses engagement acceptance

The PCAOB on July 7, 2025, publishedAudit Focus: Engagement Acceptance,” outlining key considerations and good practices for auditors evaluating whether to accept a new engagement. While intended for audit firms, the publication is equally relevant for executives and audit committees who play a vital role in ensuring a successful auditor selection and onboarding process.

Key points for consideration include:

  • Engagement risk evaluation. Firms must assess management integrity, prior restatements or control issues, and their own independence and qualifications before accepting an engagement.
  • Auditor transition. Successor auditors should conduct detailed inquiries with predecessor auditors in accordance with AS 2610, “Initial Audits – Communications Between Predecessor and Successor Auditors,” including any audit difficulties, disagreements, or compliance issues.
  • Governance awareness. Audit committees should be prepared to discuss management changes, governance effectiveness, and any known issues from prior audits.
  • Good practices observed. Use of workload scorecards for partners, preengagement risk templates, and firm policies to decline engagements lacking industry expertise.

Executives and audit committees can use this publication as a guide to strengthen their own readiness and transparency during auditor selection, ultimately supporting improved audit quality and risk mitigation.

From the American Institute of CPAs (AICPA)

AICPA proposes control objectives for stablecoin framework

On June 12, 2025, the AICPA issued an exposure draft: “Proposed Criteria for Controls Supporting Token Operations: Specific to Asset-Backed Fiat-Pegged Tokens.” This draft introduces a dual framework designed to enhance transparency, consistency, and assurance in the reporting of stablecoin operations. The first part outlines presentation and disclosure criteria, requiring detailed reporting on redeemable token quantities, redemption asset composition, and the comparison between the two. These criteria aim to address the current lack of standardization across issuers, improve stakeholder confidence, and support regulatory oversight.

The second part proposes control objectives across eight key areas, establishing a foundational framework for assessing the design and effectiveness of controls over stablecoin operations. The objectives address the following areas: token generation and management, client onboarding and maintenance, customer transaction processing, key and backup management, redemption asset management, vendor management, reporting, and IT general controls. Illustrative disclosures and implementation guidance are also provided to support practical application, while aligning with emerging regulatory expectations.

Comments are due Aug. 11, 2025.

From the Center for Audit Quality (CAQ)

CAQ shares survey results on use of AI

On June 16, 2025, the CAQ published the results of the institutional investor survey conducted by KRC Research during May 2025, which focused on the use of AI in the audit process and the use of generative AI (GenAI) within portfolio companies. Overwhelmingly, investors expressed strong confidence in AI’s ability to enhance audit accuracy, efficiency, and risk assessment, with 90% believing it increases trust in audit results. Top benefits include improved error reduction, data analysis speed, and fraud detection. However, investors underscored the need for structured safeguards: The most critical measures cited were regular audits of AI systems, clearly defined usage policies, and transparency about AI applications. Concerns persist on data privacy, lack of human oversight, and insufficient regulatory clarity.

When considering GenAI in portfolio companies, institutional investors said they remain optimistic but cautious. Nearly all surveyed expressed confidence in companies’ ability to manage AI-related risks, though data protection and cybersecurity top their list of concerns. While over half consider current federal regulations to be clear and comprehensive, a notable minority believe gaps remain. Investors prioritize proactive governance, including regular risk assessments and formal AI policies, as essential to responsible AI use.

CAQ updates S&P 500 sustainability reporting analysis

The CAQ’s “S&P 500 Sustainability Reporting and Assurance Analysis,” which examines sustainability disclosures and third-party assurance practices among S&P 500 companies, was updated in June 2025, reflecting its latest findings for the fiscal yearend 2023 reporting period. The CAQ reported that S&P 500 companies continue to embrace sustainability reporting as 99% disclosed ESG/sustainability information in 2023 (up slightly from 98% in 2022), with 73% of those obtaining third-party assurance for some of their data, up from 70% the prior year. Most companies had auditors check greenhouse gas emissions and one to three additional sustainability metrics. Specifically, 24% of companies relied on public company auditors (up from 21%), and 94% of those engaged the same firm that audits their financials.

Portions of AICPA materials reprinted with permission. Copyright 2025 by AICPA. 

Contact us

Sydney Garmong
Sydney Garmong
Partner, National Office
Mark Shannon
Mark Shannon
Partner, National Office
Daniel McGonegle
Dan McGonegle 
Senior Manager, Risk Consulting

Related insights

loading gif
November 2025 Financial Reporting, Governance, and Risk Management
November 2025 Financial Reporting, Governance, and Risk Management
Fed explores new master account type, FASB issues PSL ASU, SEC chair outlines digital assets approach, CorpFin releases post-shutdown Q&A & more.
October 2025 Financial Reporting, Governance, and Risk Management
October 2025 Financial Reporting, Governance, and Risk Management
Get details of OCC and FDIC financial and reputation risk proposals, FASB internal-use software ASU, CorpFin government shutdown Q&A, and more.
September 2025 Financial Reporting, Governance, and Risk Management
September 2025 Financial Reporting, Governance, and Risk Management
Read about FDIC, NCUA Q2 industry data; Fed large bank capital requirements; FASB digital assets project; SEC reg flex agenda; PCAOB QC 1000 timeline.
November 2025 Financial Reporting, Governance, and Risk Management
November 2025 Financial Reporting, Governance, and Risk Management
Fed explores new master account type, FASB issues PSL ASU, SEC chair outlines digital assets approach, CorpFin releases post-shutdown Q&A & more.
October 2025 Financial Reporting, Governance, and Risk Management
October 2025 Financial Reporting, Governance, and Risk Management
Get details of OCC and FDIC financial and reputation risk proposals, FASB internal-use software ASU, CorpFin government shutdown Q&A, and more.
September 2025 Financial Reporting, Governance, and Risk Management
September 2025 Financial Reporting, Governance, and Risk Management
Read about FDIC, NCUA Q2 industry data; Fed large bank capital requirements; FASB digital assets project; SEC reg flex agenda; PCAOB QC 1000 timeline.