CoComply logo
Back to Support Home

Regulatory Library

Key regulatory guidance, examination frameworks, and industry standards relevant to data governance in banking and financial services.

OCC Guidance

The Office of the Comptroller of the Currency has issued extensive guidance on data governance expectations for national banks and federal savings associations.

OCC Heightened Standards (12 CFR Part 30, Appendix D)

OCC

Sets governance expectations for large banks including independent risk management, internal controls, and board oversight. Data governance programs must demonstrate clear accountability and independent challenge.

OCC Bulletin 2013-29: Third-Party Relationships

OCC

Requires banks to maintain data governance over third-party data and ensure data used in regulatory reporting meets quality standards regardless of source.

OCC Data Governance Examination Procedures

OCC

Examiner handbook covering how OCC staff assess data governance programs including governance structure, data quality controls, and regulatory reporting integrity.

Federal Reserve Guidance

The Federal Reserve has issued significant guidance on model risk management and data integrity for state member banks and bank holding companies.

SR 11-7: Supervisory Guidance on Model Risk Management

Fed

Foundational guidance on model risk management with significant implications for data governance. Requires rigorous data integrity controls for all model inputs and outputs.

SR 20-6: LIBOR Transition Risk Management

Fed

Highlights data governance requirements for identifying and remediating LIBOR-linked exposures across all systems and contracts.

BCBS 239: Principles for Effective Risk Data Aggregation

BCBS

Basel Committee principles for risk data aggregation and reporting applicable to systemically important banks. Requires governance over data accuracy, completeness, and timeliness.

FFIEC Guidance

The Federal Financial Institutions Examination Council issues uniform guidance applicable across OCC, Federal Reserve, FDIC, NCUA, and CFPB examinations.

FFIEC Call Report Instruction Books

FFIEC

Authoritative instructions for completing FFIEC 031, 041, and 051 Call Reports. CoComply's CDE library is built from these instructions.

FFIEC IT Examination Handbook: Data Management

FFIEC

Examiner guidance on data management practices including data governance frameworks, data quality programs, and regulatory reporting controls.

Industry Frameworks

CoComply aligns to leading industry frameworks for data governance maturity assessment and program design.

DCAM: Data Management Capability Assessment Model

Industry

The EDM Council's DCAM framework defines eight data management competency areas. CoComply's governance modules map directly to DCAM domains enabling automated maturity scoring.

DAMA DMBOK: Data Management Body of Knowledge

Industry

The DAMA International body of knowledge covering data governance, data architecture, data quality, and eleven other knowledge areas. CoComply's policy and control structures align to DMBOK definitions.

CDMC: Cloud Data Management Capabilities

Industry

EDM Council framework for cloud data governance applicable to banks migrating data workloads to Azure, AWS, or GCP.