RiskTemplates · The Daily Brief Friday, May 22, 2026

Feature Operational Risk

Contingency Funding Plan Examples: What Good, Defensible CFP Language Actually Looks Like

Generic CFP language won't survive an examiner's follow-up questions. Here's how to replace vague placeholder text with specific, testable CFP language — with real examples for funding sources, triggers, testing protocols, and escalation owners.

Table of Contents

TL;DR

  • Weak CFP language lists sources without amounts, describes activation without conditions, and schedules testing without evidence. Examiners call this out.
  • Defensible CFP language names the source, the capacity, the timing, the collateral, the contact, the payment rail, and the last test date.
  • The 2023 Interagency Addendum sets an operational readiness standard: listing the discount window is not enough if you’ve never tested access.
  • Test your language by asking: could an examiner’s follow-up question stump this section? If yes, revise it.

The CFP nobody warns you about is the one that looks compliant. It’s nicely formatted, the board signed off, all the right sections exist — and somewhere in the middle of an actual liquidity stress event it would fall apart, because none of the sources have been tested and the contact listed under “FHLB advance” hasn’t worked at the bank in 18 months.

If your contingency funding plan was built mostly from a regulatory checklist, this post is for you. What follows is what weak CFP language looks like, what defensible language looks like instead, and how to close the gap before an examiner does it for you.

Why CFP Language Fails in Practice

CFP language fails in a predictable pattern. The document exists. The sections are in the right order. But when an examiner asks “walk me through your Tier 1 funding sources” and the answer is “we have access to the FHLBank and the Federal Reserve discount window,” the follow-up questions expose the gaps: What’s your borrowing capacity? When did you last test it? What collateral backs it? Who initiates a draw and how long does settlement take?

Generic language cannot answer specific questions.

The 2023 Interagency Addendum — issued jointly by the OCC, Federal Reserve, FDIC, and NCUA four months after the Silicon Valley Bank and Signature Bank failures — made explicit what examiners were already looking for: operational readiness, not just written plans. The key language from the addendum: institutions must “understand requirements and maintain operational readiness to borrow from federal funding facilities, such as the Federal Reserve discount window, if these facilities are part of their contingency funding plans.”

Operational readiness means the plan describes not just what you’d do in a stress event, but how you’d do it, who would do it, and what evidence you have that it works.

The Anatomy of Weak CFP Language

Here’s what weak CFP language looks like across three critical sections.

Funding source section:

“The Bank may access the Federal Home Loan Bank advance program as a contingent funding source, subject to collateral availability and current terms.”

What’s wrong: No dollar amount, no collateral description, no draw procedure, no settlement timing, no contact, no test history.

Trigger language:

“Management will assess liquidity conditions and activate the contingency plan as appropriate based on market conditions.”

What’s wrong: No threshold, no specific trigger metric, no named owner, no escalation path, no time frame.

Testing section:

“The Bank plans to conduct periodic testing of contingent funding sources consistent with regulatory guidance.”

What’s wrong: No frequency, no scope, no named owner, no record-keeping requirement, no evidence of past testing.

These aren’t hypothetical. They’re composites of language found in actual bank and credit union CFPs during examination. Post-2023, they’re likely to generate a finding — and for the discount window specifically, something close to an MRA.

What Defensible CFP Language Looks Like

Here’s how each section reads when it’s written to hold up.

Funding source section:

“The Bank maintains an established advance line with the Federal Home Loan Bank of [Region]. Current collateral availability supports advances up to $[X]M, collateralized by [mortgage loans / investment securities / specific collateral type], verified as of [date]. Advances are initiated by the Chief Treasury Officer (backup: CFO) via the FHLBank’s online portal. Funds settle same-business-day via Fedwire when initiated before 4:00 p.m. ET. The advance line was tested on [date]; amount: $[X]M; settlement confirmed at [time]. Contact: [FHLBank relationship manager name and direct number], confirmed current as of [date].”

Every sentence answers an examiner’s follow-up. Capacity is specified. Collateral is named and dated. The mechanism is described. Timing is explicit. Test history is recorded. Contact is verified.

Trigger language:

“The CFP activates at three escalating tiers:

  • Tier 1 (Watch): LCR falls below 120%, or three-month wholesale funding renewal rate falls below 80%. CFO and Chief Treasury Officer notified within 4 hours; weekly liquidity monitoring cadence begins.
  • Tier 2 (Stress): LCR falls below 110%, one-month deposit runoff exceeds 15%, or credit rating placed on watch for downgrade. Executive team notified; daily monitoring; Tier 2 funding sources activated.
  • Tier 3 (Crisis): LCR below 100%, or inability to roll more than 25% of maturing wholesale funding within a 30-day window. Board notified within 24 hours; emergency funding activated; external communications plan initiated.”

An examiner — or any manager — can look at current metrics and immediately determine which tier applies.

Testing section:

“Each Tier 1 and Tier 2 contingent funding source is tested at least annually. Testing includes: confirmation of current borrowing capacity with counterparty, verification that contact information is current, confirmation of collateral availability and pre-positioning status, and at least one operational test draw per source per calendar year for primary contingent facilities. Test results are documented and retained in the CFP Evidence Binder. The Annual CFP Review includes a review of all test results and a CFO certification that each listed source has been tested within the prior 12 months.”

The phrase “at least one operational test draw per source per calendar year” is the standard the 2023 addendum pushed toward for federal facilities. Extending it to all primary contingent sources is the direction examination expectations are moving.

Side-by-Side Language Comparison

CFP ComponentWeak LanguageDefensible Language
Funding source”Bank may access FHLB advances""$[X]M advance capacity, collateralized by mortgage loans, confirmed [date]“
Contact”FHLB relationship manager""[Name], [phone], confirmed current as of [date]“
Settlement timing”Funds can be accessed when needed""Same-business-day Fedwire settlement if initiated before 4:00 p.m. ET”
Trigger”Management judgment based on conditions""LCR < 110% triggers Tier 2 activation; CFO notified within 4 hours”
Testing”Periodic testing planned""Annual test draw; most recent: [date], $[X]M, settled [time]“
Evidence reference”Records on file""Test results in CFP Evidence Binder, reviewed at annual CFP update cycle”

Discount Window Language: The Highest-Scrutiny Section

Post-SVB, the Federal Reserve discount window is the most-examined item in any bank CFP. The 2023 addendum was unambiguous: if the discount window is in your CFP, you need to demonstrate operational readiness — not just list it. Supervisory expectation includes establishing a borrowing arrangement, pre-positioning collateral, and completing periodic test transactions.

Weak language:

“The Bank may access the Federal Reserve discount window as a secondary contingent funding source.”

Defensible language:

“The Bank maintains a borrowing arrangement with the [Federal Reserve Bank of Region]. Collateral has been pre-positioned as of [date]; current capacity supports advances of approximately $[X]M under primary credit. The discount window is tested by completing a small-dollar test borrow on a semi-annual basis. Most recent test borrow: [date]; amount: $[X,000]; settlement confirmed [date/time]. Designated Reserve Bank contact: [name, phone, email], confirmed current as of [date]. Operational responsibility: Chief Treasury Officer; backup: CFO.”

If your CFP lists the discount window and you cannot fill in those blanks, that’s a gap to close before your next examination. Examiners are now specifically testing for it.

Wholesale Funding and Brokered Deposit Language

Wholesale funding and brokered deposits present a different drafting challenge: they’re availability-dependent in ways that FHLB advances and discount window access are not. Brokered deposits run first in a stress event. CFP language needs to acknowledge that.

Weak language:

“The Bank may access brokered deposit networks and wholesale funding markets as needed.”

Defensible language:

“The Bank has established relationships with [broker names or network]. Under normal market conditions, this channel can source up to $[X]M in deposits within [timeframe]. This source is classified as Tier 3 and is appropriate only in non-crisis scenarios where the Bank’s credit standing is sufficient to attract market participants. The Bank does not rely on wholesale markets or brokered deposits for Tier 1 or Tier 2 stress activation. Market access is reviewed quarterly; most recent review: [date].”

The “Tier 3 and non-crisis only” specification signals to examiners that you understand how these sources actually behave under stress — they evaporate when you need them most.

Evidence Behind the Language

Every language element that references testing, capacity confirmation, or current contacts needs a corresponding artifact in your CFP evidence binder. If the language says it and the file doesn’t have it, you have a gap.

Language ElementRequired Evidence Artifact
FHLB advance capacity confirmedCurrent-year FHLBank borrowing capacity confirmation
Discount window test borrow completedFederal Reserve test borrow confirmation, date and amount
Collateral pre-positionedCollateral schedule or pledging confirmation
Contacts verified as currentAnnual contact confirmation memo
CFP triggers reviewedTrigger review log with current metrics vs. thresholds
Annual testing cycle completeCFO certification with testing summary

The link between language and evidence is what makes a CFP defensible. Both need to exist, and they need to connect clearly.

Escalation and Governance Language

One of the most consistently weak areas in CFPs is escalation: who owns each activation decision, who gets notified, and what happens when the primary owner is unavailable.

Weak language:

“The liquidity management team will convene and assess available options.”

Defensible language:

“Tier 1 activation is the responsibility of the Chief Treasury Officer (CTO), who convenes a liquidity management call within 4 business hours of trigger breach confirmation. If the CTO is unavailable, the CFO assumes activation responsibility. Board notification is required at Tier 2 and above, within 24 hours of activation. ALCO receives a written liquidity update within 48 hours of any tier activation.”

Named roles with time-bound responsibilities. That’s the standard. See the related post on setting defensible CFP triggers for how to structure the threshold language that feeds these escalation decisions.

The Most Common CFP Language Findings

Based on patterns from common CFP exam findings, these language issues generate the most findings:

  1. Funding sources listed without capacity amounts or conditions — most common overall
  2. Discount window listed but never operationally tested — most common post-2023
  3. Triggers described qualitatively — “deteriorating conditions” instead of “LCR < 110%”
  4. Testing language in future tense — “the Bank plans to” rather than “the Bank tested on [date]”
  5. Contact information not verified within the current review cycle
  6. Board approval documented without evidence of substantive board engagement

So What?

Your CFP language is the first thing an examiner reads and the standard against which all follow-up questions are tested. If the language is specific, they’ll ask for the evidence. If the language is vague, they’ll write it up.

The revision exercise is straightforward: go through every funding source section, every trigger description, and every testing entry in your current CFP and ask whether an examiner’s follow-up question would find a documented answer. If not, that’s your revision list.

The Financial Risk Management Kit includes CFP templates built to this standard — structured to meet the 2023 interagency addendum requirements, with embedded prompts for each language element so you know exactly what specificity to reach for.

◆ Need the working template?

Start with the source guide.

These answer-first guides summarize the required fields, evidence, and implementation steps behind the templates practitioners search for.

◆ FAQ

Frequently asked questions.

What does good contingency funding plan language look like?
Good CFP language is specific, testable, and operationally realistic. It names the actual funding source, the draw amount available (e.g., 'up to $50M subject to collateral availability'), the settlement timing, the contact person with backup, the payment rail, and the testing cadence. Every sentence should be able to answer an examiner's follow-up question with a documented artifact.
What do examiners flag most often in CFP language?
The most common examiner findings: (1) vague funding source descriptions without amounts or availability conditions; (2) listed sources that have never been operationally tested; (3) trigger language that says 'management judgment' rather than specific thresholds; (4) escalation chains with no named owners or backup contacts; (5) testing language written in future tense — describing plans rather than completed activity.
Does the 2023 interagency addendum require specific CFP language?
The 2023 addendum (OCC Bulletin 2023-25, FDIC FIL-39-2023) doesn't prescribe exact language, but it sets clear operational expectations: institutions must understand requirements, maintain operational readiness, and actually test contingent sources — especially the Federal Reserve discount window. A CFP that lists the discount window without documented test activity or collateral pre-positioning doesn't meet this standard, regardless of how the written language reads.
Can I use a CFP template as the basis for my language?
A template provides the structure — sections, headings, components. But the language has to be customized to your institution's specific funding sources, collateral, payment rails, governance, and regulatory profile. A community bank with an FHLB advance line needs different language than a fintech without a charter. The template tells you what to include; the examples in this post show you whether what you've written will hold up under examiner scrutiny.
What's the difference between a CFP example and a CFP template?
A CFP template is a structural document with placeholder sections. A CFP example shows what the completed language looks like — specifically, what weak language reads like versus what defensible language reads like. Both are useful together: the template gives you the format, the examples show you the content standard you're trying to hit.
Should the CFP name individual employees or just roles?
Use roles for primary ownership within the CFP itself (e.g., 'Chief Treasury Officer or designee') so the document doesn't become stale every time someone changes jobs. Your supporting contact directory and test records should name specific individuals with direct contact information, confirmed current at least annually. The CFP should reference the contact directory rather than embed individual names.
Rebecca Leung

Author

Rebecca Leung

Rebecca Leung has 8+ years of risk and compliance experience across first and second line roles at commercial banks, asset managers, and fintechs. Former management consultant advising financial institutions on risk strategy. Founder of RiskTemplates.

◆ Related framework

Financial Risk Management Kit

Credit risk, liquidity, concentration, and capital adequacy templates built for fintechs.

◆ Immaterial Findings · Weekly

Sharp risk & compliance insights practitioners actually read.

Enforcement actions, regulatory shifts, and practical frameworks — no fluff, no filler.

◆ Practitioners from banks, fintechs, and asset managers · Delivered weekly

Immaterial Findings · Newsletter

The brief, in your inbox.

Enforcement of the week, a framework breakdown, and the prompts that are actually worth running. Delivered to your inbox. Free.