Cybersecurity and Financial System Resilience Report

This Office of the Comptroller of the Currency report reviews cybersecurity oversight and financial system resilience for banking regulators, financial institutions, and security leaders. As of September 30, 2025, the federal banking system comprised 1,010 financial institutions holding $16.7 trillion in bank assets.

Readers will learn how the OCC supervises bank cybersecurity, protects its own systems, coordinates threat information, and tracks emerging risks. Banks must notify their primary regulator within 36 hours after determining that a qualifying security incident occurred. The report examines ransomware, account takeover, third-party vulnerabilities, AI-enabled attacks, and post-quantum cryptography. As the OCC states, “The OCC views operational resilience and cybersecurity as important issues for the federal banking system.”