Feature Operational Risk
Contingency Funding Plan Examples: What Good, Defensible CFP Language Actually Looks Like
Generic CFP language won't survive an examiner's follow-up questions. Here's how to replace vague placeholder text with specific, testable CFP language — with real examples for funding sources, triggers, testing protocols, and escalation owners.
Table of Contents
TL;DR
- Weak CFP language lists sources without amounts, describes activation without conditions, and schedules testing without evidence. Examiners call this out.
- Defensible CFP language names the source, the capacity, the timing, the collateral, the contact, the payment rail, and the last test date.
- The 2023 Interagency Addendum sets an operational readiness standard: listing the discount window is not enough if you’ve never tested access.
- Test your language by asking: could an examiner’s follow-up question stump this section? If yes, revise it.
The CFP nobody warns you about is the one that looks compliant. It’s nicely formatted, the board signed off, all the right sections exist — and somewhere in the middle of an actual liquidity stress event it would fall apart, because none of the sources have been tested and the contact listed under “FHLB advance” hasn’t worked at the bank in 18 months.
If your contingency funding plan was built mostly from a regulatory checklist, this post is for you. What follows is what weak CFP language looks like, what defensible language looks like instead, and how to close the gap before an examiner does it for you.
Why CFP Language Fails in Practice
CFP language fails in a predictable pattern. The document exists. The sections are in the right order. But when an examiner asks “walk me through your Tier 1 funding sources” and the answer is “we have access to the FHLBank and the Federal Reserve discount window,” the follow-up questions expose the gaps: What’s your borrowing capacity? When did you last test it? What collateral backs it? Who initiates a draw and how long does settlement take?
Generic language cannot answer specific questions.
The 2023 Interagency Addendum — issued jointly by the OCC, Federal Reserve, FDIC, and NCUA four months after the Silicon Valley Bank and Signature Bank failures — made explicit what examiners were already looking for: operational readiness, not just written plans. The key language from the addendum: institutions must “understand requirements and maintain operational readiness to borrow from federal funding facilities, such as the Federal Reserve discount window, if these facilities are part of their contingency funding plans.”
Operational readiness means the plan describes not just what you’d do in a stress event, but how you’d do it, who would do it, and what evidence you have that it works.
The Anatomy of Weak CFP Language
Here’s what weak CFP language looks like across three critical sections.
Funding source section:
“The Bank may access the Federal Home Loan Bank advance program as a contingent funding source, subject to collateral availability and current terms.”
What’s wrong: No dollar amount, no collateral description, no draw procedure, no settlement timing, no contact, no test history.
Trigger language:
“Management will assess liquidity conditions and activate the contingency plan as appropriate based on market conditions.”
What’s wrong: No threshold, no specific trigger metric, no named owner, no escalation path, no time frame.
Testing section:
“The Bank plans to conduct periodic testing of contingent funding sources consistent with regulatory guidance.”
What’s wrong: No frequency, no scope, no named owner, no record-keeping requirement, no evidence of past testing.
These aren’t hypothetical. They’re composites of language found in actual bank and credit union CFPs during examination. Post-2023, they’re likely to generate a finding — and for the discount window specifically, something close to an MRA.
What Defensible CFP Language Looks Like
Here’s how each section reads when it’s written to hold up.
Funding source section:
“The Bank maintains an established advance line with the Federal Home Loan Bank of [Region]. Current collateral availability supports advances up to $[X]M, collateralized by [mortgage loans / investment securities / specific collateral type], verified as of [date]. Advances are initiated by the Chief Treasury Officer (backup: CFO) via the FHLBank’s online portal. Funds settle same-business-day via Fedwire when initiated before 4:00 p.m. ET. The advance line was tested on [date]; amount: $[X]M; settlement confirmed at [time]. Contact: [FHLBank relationship manager name and direct number], confirmed current as of [date].”
Every sentence answers an examiner’s follow-up. Capacity is specified. Collateral is named and dated. The mechanism is described. Timing is explicit. Test history is recorded. Contact is verified.
Trigger language:
“The CFP activates at three escalating tiers:
- Tier 1 (Watch): LCR falls below 120%, or three-month wholesale funding renewal rate falls below 80%. CFO and Chief Treasury Officer notified within 4 hours; weekly liquidity monitoring cadence begins.
- Tier 2 (Stress): LCR falls below 110%, one-month deposit runoff exceeds 15%, or credit rating placed on watch for downgrade. Executive team notified; daily monitoring; Tier 2 funding sources activated.
- Tier 3 (Crisis): LCR below 100%, or inability to roll more than 25% of maturing wholesale funding within a 30-day window. Board notified within 24 hours; emergency funding activated; external communications plan initiated.”
An examiner — or any manager — can look at current metrics and immediately determine which tier applies.
Testing section:
“Each Tier 1 and Tier 2 contingent funding source is tested at least annually. Testing includes: confirmation of current borrowing capacity with counterparty, verification that contact information is current, confirmation of collateral availability and pre-positioning status, and at least one operational test draw per source per calendar year for primary contingent facilities. Test results are documented and retained in the CFP Evidence Binder. The Annual CFP Review includes a review of all test results and a CFO certification that each listed source has been tested within the prior 12 months.”
The phrase “at least one operational test draw per source per calendar year” is the standard the 2023 addendum pushed toward for federal facilities. Extending it to all primary contingent sources is the direction examination expectations are moving.
Side-by-Side Language Comparison
| CFP Component | Weak Language | Defensible Language |
|---|---|---|
| Funding source | ”Bank may access FHLB advances" | "$[X]M advance capacity, collateralized by mortgage loans, confirmed [date]“ |
| Contact | ”FHLB relationship manager" | "[Name], [phone], confirmed current as of [date]“ |
| Settlement timing | ”Funds can be accessed when needed" | "Same-business-day Fedwire settlement if initiated before 4:00 p.m. ET” |
| Trigger | ”Management judgment based on conditions" | "LCR < 110% triggers Tier 2 activation; CFO notified within 4 hours” |
| Testing | ”Periodic testing planned" | "Annual test draw; most recent: [date], $[X]M, settled [time]“ |
| Evidence reference | ”Records on file" | "Test results in CFP Evidence Binder, reviewed at annual CFP update cycle” |
Discount Window Language: The Highest-Scrutiny Section
Post-SVB, the Federal Reserve discount window is the most-examined item in any bank CFP. The 2023 addendum was unambiguous: if the discount window is in your CFP, you need to demonstrate operational readiness — not just list it. Supervisory expectation includes establishing a borrowing arrangement, pre-positioning collateral, and completing periodic test transactions.
Weak language:
“The Bank may access the Federal Reserve discount window as a secondary contingent funding source.”
Defensible language:
“The Bank maintains a borrowing arrangement with the [Federal Reserve Bank of Region]. Collateral has been pre-positioned as of [date]; current capacity supports advances of approximately $[X]M under primary credit. The discount window is tested by completing a small-dollar test borrow on a semi-annual basis. Most recent test borrow: [date]; amount: $[X,000]; settlement confirmed [date/time]. Designated Reserve Bank contact: [name, phone, email], confirmed current as of [date]. Operational responsibility: Chief Treasury Officer; backup: CFO.”
If your CFP lists the discount window and you cannot fill in those blanks, that’s a gap to close before your next examination. Examiners are now specifically testing for it.
Wholesale Funding and Brokered Deposit Language
Wholesale funding and brokered deposits present a different drafting challenge: they’re availability-dependent in ways that FHLB advances and discount window access are not. Brokered deposits run first in a stress event. CFP language needs to acknowledge that.
Weak language:
“The Bank may access brokered deposit networks and wholesale funding markets as needed.”
Defensible language:
“The Bank has established relationships with [broker names or network]. Under normal market conditions, this channel can source up to $[X]M in deposits within [timeframe]. This source is classified as Tier 3 and is appropriate only in non-crisis scenarios where the Bank’s credit standing is sufficient to attract market participants. The Bank does not rely on wholesale markets or brokered deposits for Tier 1 or Tier 2 stress activation. Market access is reviewed quarterly; most recent review: [date].”
The “Tier 3 and non-crisis only” specification signals to examiners that you understand how these sources actually behave under stress — they evaporate when you need them most.
Evidence Behind the Language
Every language element that references testing, capacity confirmation, or current contacts needs a corresponding artifact in your CFP evidence binder. If the language says it and the file doesn’t have it, you have a gap.
| Language Element | Required Evidence Artifact |
|---|---|
| FHLB advance capacity confirmed | Current-year FHLBank borrowing capacity confirmation |
| Discount window test borrow completed | Federal Reserve test borrow confirmation, date and amount |
| Collateral pre-positioned | Collateral schedule or pledging confirmation |
| Contacts verified as current | Annual contact confirmation memo |
| CFP triggers reviewed | Trigger review log with current metrics vs. thresholds |
| Annual testing cycle complete | CFO certification with testing summary |
The link between language and evidence is what makes a CFP defensible. Both need to exist, and they need to connect clearly.
Escalation and Governance Language
One of the most consistently weak areas in CFPs is escalation: who owns each activation decision, who gets notified, and what happens when the primary owner is unavailable.
Weak language:
“The liquidity management team will convene and assess available options.”
Defensible language:
“Tier 1 activation is the responsibility of the Chief Treasury Officer (CTO), who convenes a liquidity management call within 4 business hours of trigger breach confirmation. If the CTO is unavailable, the CFO assumes activation responsibility. Board notification is required at Tier 2 and above, within 24 hours of activation. ALCO receives a written liquidity update within 48 hours of any tier activation.”
Named roles with time-bound responsibilities. That’s the standard. See the related post on setting defensible CFP triggers for how to structure the threshold language that feeds these escalation decisions.
The Most Common CFP Language Findings
Based on patterns from common CFP exam findings, these language issues generate the most findings:
- Funding sources listed without capacity amounts or conditions — most common overall
- Discount window listed but never operationally tested — most common post-2023
- Triggers described qualitatively — “deteriorating conditions” instead of “LCR < 110%”
- Testing language in future tense — “the Bank plans to” rather than “the Bank tested on [date]”
- Contact information not verified within the current review cycle
- Board approval documented without evidence of substantive board engagement
So What?
Your CFP language is the first thing an examiner reads and the standard against which all follow-up questions are tested. If the language is specific, they’ll ask for the evidence. If the language is vague, they’ll write it up.
The revision exercise is straightforward: go through every funding source section, every trigger description, and every testing entry in your current CFP and ask whether an examiner’s follow-up question would find a documented answer. If not, that’s your revision list.
The Financial Risk Management Kit includes CFP templates built to this standard — structured to meet the 2023 interagency addendum requirements, with embedded prompts for each language element so you know exactly what specificity to reach for.
◆ Need the working template?
Start with the source guide.
These answer-first guides summarize the required fields, evidence, and implementation steps behind the templates practitioners search for.
◆ Related template
Financial Risk Management Kit
Credit risk, liquidity, concentration, and capital adequacy templates built for fintechs.
◆ FAQ
Frequently asked questions.
What does good contingency funding plan language look like?
What do examiners flag most often in CFP language?
Does the 2023 interagency addendum require specific CFP language?
Can I use a CFP template as the basis for my language?
What's the difference between a CFP example and a CFP template?
Should the CFP name individual employees or just roles?
Author
Rebecca Leung
Rebecca Leung has 8+ years of risk and compliance experience across first and second line roles at commercial banks, asset managers, and fintechs. Former management consultant advising financial institutions on risk strategy. Founder of RiskTemplates.
◆ Related framework
Financial Risk Management Kit
Credit risk, liquidity, concentration, and capital adequacy templates built for fintechs.
◆ Keep reading
Related posts.
Operational Risk
AUP Ongoing Monitoring: What to Watch After You Approve a Higher-Risk Customer
Your AUP exception memo approved the customer. The compliance work isn't done — here's the behavioral monitoring framework, re-review triggers, and exit process that keeps the approval defensible over time.
May 20, 2026
Operational Risk
Fraud KRIs for Fintechs: Transaction Volume, Loss Rates, Alert Backlogs, and Threshold Drift
The fraud KRIs you set at launch become misleading when your transaction volume triples. Here's the full set of fraud metrics fintech risk teams need — and the calibration rules that keep them honest as the business scales.
May 20, 2026
Operational Risk
Liquidity KRIs for Fintech and Banking Teams: Early Warnings Before the Funding Problem Becomes Obvious
The metrics that matter for liquidity risk management — uninsured deposit concentration, deposit runoff rate, wholesale funding renewal, and six more — with CFP tier mapping and threshold guidance practitioners can actually use.
May 20, 2026
◆ Immaterial Findings · Weekly
Sharp risk & compliance insights practitioners actually read.
Enforcement actions, regulatory shifts, and practical frameworks — no fluff, no filler.
◆ Practitioners from banks, fintechs, and asset managers · Delivered weekly