Supervisory reference

OCC Super Intelligence Framework

OCC's examiner resource for evaluating banks' use of AI and agentic systems. It creates no new supervisory expectations or enforceable requirements for banks; its components and risk tiers are illustrative.

Edition on record: OCC Bulletin 2026-54
Issuing authority: Office of the Comptroller of the Currency (opens in a new tab)
Edition published: November 4, 2026
Source last checked: November 4, 2026

Understand the scope

Context for supervisory judgment.

This resource supports OCC examiners’ risk-based judgment. It creates no new bank requirements or certification program. Banks are not expected to use it to assess their own SI use or risk management.

The library tracks the issuing authority and edition. The document’s illustrative components are not counted as mandatory controls, and no OCC-specific assessment method is implemented.

Source access and licensing

Official bulletin and 22-page supervisory framework reviewed on 2026-11-04. The PDF describes 16 illustrative components, six pillars and four illustrative tiers, not 16 mandatory controls. Banks are not expected to use it to assess their own SI use or risk management.

Prepare with context

Evidence for an informed discussion.

A scoped discussion can connect the bank’s documented purpose and permissions with records of actual activity, testing and human oversight. Any evidence method must be agreed for the engagement; this reference page does not evaluate a bank or assign a risk tier.

A framework-specific collection workflow has not been activated. The reference material on this page can inform scoping and preparation; it does not establish evidence collection or assessment readiness.

ControlFrame availability

Source metadata available

Authority and version facts, with a parsed public catalog when available; no tenant blueprint or executable evidence method is activated.

How availability is determined

OCC Super Intelligence Framework records verified source metadata only. No framework-specific assessment method or collection workflow is implemented; the source is an illustrative examiner resource, not a mandatory control catalog.

Catalog status: Planned. Tracked metadata: we record the regime and its issuing authority for review. Registry presence does not mean automated monitoring is active. No control or requirement model is implemented.

Source metadata only. No OCC-specific assessment method, normalized reference catalog, automated source monitor or collection workflow is implemented.

Follow the source

Editions and transitions.

These are the editions recorded in the library, checked November 4, 2026. Confirm the applicable edition with the authority before beginning an assessment.

OCC Bulletin 2026-54Current edition on record
November 4, 2026

Check the basis

Sources you can follow.

Verified against the issuing authority’s own publication. Source verification was recorded on November 4, 2026.

Office of the Comptroller of the Currency (opens in a new tab)
Issuing authority and framework publication.
Edition reference: OCC Bulletin 2026-54 (opens in a new tab)
The publication used to establish the recorded edition.

Source provenance and record details

Framework record: occ-super-intelligence-supervisory-framework.

Source artifact: acquisition required.

Parsed catalog: Not ingested.

Illustrative components are not represented as mandatory control families.

Record last updated: November 4, 2026.

Common questions

A closer look.

What is OCC Super Intelligence Framework?

Who is this resource for?

OCC examiners evaluating national banks, federal savings associations, and federal branches and agencies of foreign banks. It creates no new supervisory expectations, enforceable standards or prescriptive requirements for banks.

Which edition is recorded?

OCC Bulletin 2026-54, published 2026-11-04. Source: https://www.occ.gov/news-issuances/bulletins/2026/bulletin-2026-54.html.

What does ControlFrame currently provide?

Verified source metadata only. No OCC-specific assessment method, automated collection workflow or control catalog is implemented. The illustrative components and tiers are not mandatory bank controls or a certification scheme.

At a glance

OCC Super Intelligence Framework

OCC Bulletin 2026-54

Framework reference: Authority and edition tracked
Evidence preparation: Source metadata only
Source confidence: Primary authority

Examiner guidance informs a discussion; it does not create bank obligations. Any engagement method and evidence decisions need their own scope and named reviewer.

Continue exploring

Related frameworks.

APRA CPS 230

Also applies to banking · Australia's cross-industry prudential standard for operational risk, continuity of critical operations, and material service-provider risk at APRA-regulated entities. It is a binding supervisory standard, not a certification.

FFIEC IT Examination Handbook

Also applies to banking · The living technology-supervision reference used by US financial institution examiners, with current booklets, work programs, laws, and guidance. It is supervisory guidance, not a certification; the separate FFIEC Cybersecurity Assessment Tool was retired in 2025.

COBIT 2019 (SOX ITGC reference)

Same framework family · SOX requires management and auditor assessment of internal control over financial reporting but does not prescribe one IT-control catalog. COBIT 2019 is licensed governance guidance often used to design and map IT general controls; neither this record nor COBIT is a SOX certification.

COSO Internal Control—Integrated Framework

Same framework family · The widely used internal-control framework for operations, reporting, and compliance, including internal control over financial reporting. It supplies evaluation criteria; it is not a certification and SOX does not create a fixed IT-control catalog.

Explore an evidence workflow.

Discuss how source context, workpapers and human review could support a scoped engagement. OCC-specific assessment support is not yet implemented.

Request a walkthrough