OCC Bulletin 2026-29: What the New Loan Portfolio Management Handbook Means for Your Credit Risk Controls and Exam Prep

On June 25, 2026, the OCC quietly issued something that loan officers, chief credit officers, and risk managers at national banks should treat as a major event: Bulletin 2026-29, replacing the Loan Portfolio Management booklet in the Comptroller’s Handbook.

The original booklet was published in 1998. The internet was still new. Commercial real estate concentration limits weren’t a regulatory flashpoint. Private credit markets barely existed as a distinct asset class. Credit scoring models were paper-based at most community banks.

That 28-year-old framework is now retired. What replaced it updates examiner expectations across credit risk appetite documentation, portfolio concentration management, model risk, stress testing, and private credit exposures — including payment-in-kind arrangements that the Spring 2026 Semiannual Risk Perspective identified as a new priority focus.

TL;DR

• OCC Bulletin 2026-29 (June 25, 2026) replaces the 1998 Loan Portfolio Management handbook and applies to all national banks and federal savings associations
• The update incorporates OTS Examination Handbook lending sections and rescinds OTS Thrift Bulletin 78a, now Appendix K
• New examiner focus areas: board-level credit risk appetite, written concentration frameworks, model risk management for credit models, and CRE/private credit stress testing
• The Spring 2026 Semiannual Risk Perspective added private credit and PIK arrangements as a discrete examiner concern — Bulletin 2026-29 is the examination standard they’ll use
• If your RCSA hasn’t been updated to reflect 2026 examination standards for credit risk, your next safety-and-soundness exam is where you’ll find out

What OCC Bulletin 2026-29 Actually Does

The bulletin issues a new Loan Portfolio Management booklet in the Comptroller’s Handbook that replaces the 1998 version. Alongside it, the OCC incorporated lending operations content from the former Office of Thrift Supervision (OTS) Examination Handbook and formally rescinded OTS Thrift Bulletin 78a — moving its substance into Appendix K of the new booklet.

This matters for federal savings associations that previously operated under OTS handbook guidance that hadn’t been fully harmonized with OCC examination standards since the 2011 OTS-OCC merger. The 2026 bulletin closes that harmonization gap.

The updated handbook applies to:

• All national banks (OCC-chartered)
• Federal savings associations (formerly OTS-supervised, now OCC-supervised)
• Federal branches and agencies of foreign banks where applicable

For state-chartered banks supervised by the FDIC or Federal Reserve, the bulletin doesn’t directly apply — but the Comptroller’s Handbook is widely used as an interagency benchmark, and FDIC and Fed examiners often assess analogous standards.

The Six Areas Where Examiner Expectations Changed

1. Board-Level Credit Risk Appetite Documentation

The 1998 handbook assumed most banks had informal understandings of their risk tolerance for lending. The 2026 handbook requires a documented credit risk appetite statement — approved at the board level, covering the types and concentrations of credit risk the institution will accept, and cascaded into underwriting standards and portfolio limits.

Examiners will now ask to see it. If your risk committee has maintained verbal or draft-level credit risk appetite parameters, those need to be formalized and board-approved before your next exam.

What this means for your RCSA: Add a control for credit risk appetite documentation — who owns it, how often it’s reviewed, and the governance process for exceptions or amendments. The control evidence is the board-approved document and meeting minutes showing approval.

2. Written Concentration Frameworks with Exception Tracking

Loan portfolio concentration risk has been a regulatory focus since the 2006 CRE concentration guidance, but the 2026 handbook formalizes the expectation for a written concentration management framework — not just informal limits in a credit policy document.

The framework should define:

• Concentration thresholds by category (CRE-to-capital, construction-to-capital, single borrower, industry, geography)
• Monitoring frequency and escalation procedures
• Board-level exception approval and tracking
• Stress testing or sensitivity analysis tied to concentration levels

For institutions with material commercial real estate portfolios, this is no longer a back-of-policy-manual line item. It’s a standalone framework subject to examiner review.

The CRE refinancing context: The Spring 2026 Semiannual Risk Perspective specifically flagged CRE refinancing risk — properties that absorbed pandemic-era extended terms are now facing maturity walls under materially higher rate environments. Examiners scrutinizing your concentration framework will also be looking at your maturity profile analysis.

3. Model Risk Management for Credit Models

The 2026 handbook includes explicit guidance on model risk management for credit underwriting and portfolio management models — an area the 1998 handbook didn’t address because modern credit scoring wasn’t yet prevalent.

This covers:

• Internal credit scoring and rating models
• Vendor-managed underwriting platforms (including fintech partner underwriting systems)
• Automated pricing models
• Any model used in credit decision-making or portfolio risk measurement

Examiners will look for evidence that your institution validates credit models it relies on, documents model limitations and assumptions, monitors model performance over time, and maintains a model inventory that identifies critical credit models and their governance status.

Community banks that use third-party loan origination systems with embedded scoring should review their vendor contracts: is the vendor required to provide model validation documentation? Are model performance metrics reported to you?

4. Stress Testing and Sensitivity Analysis

The 2026 handbook extends stress testing expectations to community banks with material concentrations — not just the largest institutions subject to formal supervisory stress testing requirements. This doesn’t mean DFAST-equivalent exercises for $500 million community banks. It means meaningful sensitivity analysis: what happens to your CRE portfolio if cap rates rise another 75 basis points? What’s your charge-off exposure if vacancy rates in your primary markets increase 15%?

The handbook expects these analyses to be documented, presented to the board, and connected to your concentration management framework. Ad hoc stress testing that lives in an analyst’s spreadsheet and never surfaces in board materials won’t satisfy the examination standard.

5. Shared National Credits and Participations Due Diligence

Syndicated lending and loan participation purchases are a specific area of emphasis in the 2026 handbook. The updated guidance requires documented due diligence standards showing that participating institutions perform independent credit analysis — they don’t rely solely on the lead bank’s underwriting.

If your institution purchases loan participations without conducting its own underwriting review and credit memo, the 2026 handbook creates clear examination exposure. Examiners will look for:

• Written participation due diligence policy
• Evidence of independent credit analysis for each participation
• Credit approval documentation that doesn’t simply reference the lead bank

6. Private Credit and PIK Arrangement Oversight

This is the area where Bulletin 2026-29 intersects most directly with the Spring 2026 Semiannual Risk Perspective. The handbook’s treatment of private credit exposures — including direct lending, co-lending arrangements, and purchased private credit assets — addresses how institutions should classify, monitor, and stress test these exposures.

Payment-in-kind (PIK) arrangements receive specific attention. A PIK loan allows the borrower to pay interest by issuing additional principal rather than cash. This defers cash interest until refinancing or maturity, which means standard delinquency and past-due metrics may not surface credit deterioration until it’s acute. The Risk Perspective called PIK arrangements a mechanism that “may obscure the true credit quality of the underlying borrower.”

Examiners will now assess whether institutions with private credit exposures have monitoring processes that look beyond standard delinquency metrics — and whether concentration management frameworks account for PIK exposure in stress scenarios.

What Examiners Will Test at Your Next Exam

Based on the Bulletin 2026-29 framework and the Spring 2026 Risk Perspective priorities, here’s what a safety-and-soundness examination of your credit risk program will now specifically probe:

How This Changes Your RCSA

Your Risk and Control Self-Assessment for credit risk was probably last updated to reflect examination standards that are now retired. If your RCSA maps controls to the 1998 handbook structure, it’s mapping to a framework examiners are no longer using.

The immediate update priorities:

Add controls that didn’t exist before. Credit risk appetite documentation, private credit PIK monitoring, and credit model inventory management are new examination expectations. Your RCSA should now include specific controls for each, with a control owner, frequency, and documented evidence of operation.

Update existing controls to current standards. Your concentration management controls likely exist but may not reflect the 2026 expectation for a standalone written framework with board exception approval. Update the control description to match what the handbook now requires — not what the 1998 version expected.

Document gaps with compensating controls. If you have material CRE concentration but haven’t yet formalized your stress testing into board-level presentations, document that gap explicitly with a compensating control (quarterly portfolio monitoring presented to credit committee, for instance) and a remediation timeline. An RCSA that acknowledges gaps with documented compensating controls is far better positioned for examination than an RCSA that implies full compliance with standards you haven’t yet fully implemented.

Map controls to the 2026 handbook, not the 1998 version. If your RCSA references the Comptroller’s Handbook for credit risk, update those references to Bulletin 2026-29 and the 2026 booklet.

The RCSA done right at the operational risk level requires mapping your actual control environment to your actual examination framework — and the 2026 examination framework just changed.

Community Banks: The Proportionality Question

A common question when a new Comptroller’s Handbook booklet issues: does this apply the same way to a $400 million community bank as it does to a $10 billion regional?

The handbook’s examination standards are applied with proportionality — a principle the OCC has consistently maintained. Examiners assess the complexity and risk profile of the institution against its governance and control environment. A $400 million community bank with a straightforward CRE portfolio concentrated in owner-occupied properties isn’t held to the same stress testing depth as a $5 billion bank with a high CRE-to-capital ratio and significant construction lending.

But proportionality isn’t a pass. A $400 million bank with a 350% CRE-to-capital ratio will face heightened examination scrutiny regardless of asset size, and the 2026 handbook is the framework that scrutiny will use. The question is whether your control environment is commensurate with your actual risk profile — not whether it satisfies a minimum threshold for your peer group.

If your CRE concentration is elevated, your private credit exposure has PIK features, or your loan participations have been purchased with thin due diligence documentation, the proportionality principle doesn’t reduce your examination exposure — it just calibrates how deep the examiner goes.

What the OTS Integration Means for Federal Savings Associations

Federal savings associations that converted from OTS supervision to OCC in 2011 have operated under a blended examination framework ever since. The OTS Examination Handbook lending sections that remained in parallel with OCC standards are now formally consolidated and rescinded through Bulletin 2026-29.

For federal savings associations:

• OTS Thrift Bulletin 78a is rescinded and incorporated as Appendix K
• The relevant OTS lending examination standards are incorporated into the unified 2026 booklet
• Federal savings associations are now examined under a single, harmonized framework

If your institution has been maintaining separate policy and control documentation that tracked OTS-lineage standards separately from OCC standards, the 2026 bulletin is the opportunity to consolidate.

So What? Your Pre-Exam Action List

If your next safety-and-soundness examination is within the next 18 months — and for most OCC-supervised institutions, that’s an annual or 18-month cycle — your credit risk exam prep should now include:

1. Review your credit risk appetite documentation. Is it board-approved? Does it address CRE, construction, single-borrower, and private credit concentrations? Does it connect to your underwriting standards and portfolio limits?

2. Audit your concentration framework. Is it a standalone written framework with defined thresholds, exception approval requirements, and monitoring frequency — or is it buried in a credit policy addendum?

3. Inventory your credit models. Every scoring, rating, or pricing model in use — including vendor-provided models — should be in a model inventory with validation status, last review date, and governance designation.

4. Document your stress testing. If you have CRE or construction concentrations, produce a documented sensitivity analysis and present it to the board before your exam cycle.

5. Review your participations due diligence. For every recent participation purchase, confirm you have an independent credit memo — separate from the lead bank’s underwriting package.

6. Assess your PIK exposure. If you hold private credit with PIK features, document how you monitor those exposures beyond standard delinquency metrics.

7. Update your RCSA. Map credit risk controls to the 2026 handbook standards, document gaps with compensating controls, and assign remediation timelines.

The RCSA Risk & Control Self-Assessment Template built for financial services teams includes credit risk control frameworks mapped to current OCC examination standards, with pre-built sections for concentration management, model risk, and stress testing governance. It’s designed to produce examination-ready RCSA documentation before your examiner asks for it.

The Examination Timeline

OCC issued Bulletin 2026-29 on June 25, 2026. Examiners are already incorporating the 2026 handbook into examination planning. Any institution entering an examination cycle in Q3 or Q4 2026 should expect the new framework to be the reference standard.

The OCC’s semiannual risk perspective process gives advance signal on where examiner focus is heading each year — and the Spring 2026 edition made clear that CRE refinancing risk and private credit quality are both on the radar. Bulletin 2026-29 is how those priorities translate into examination standards.

There’s no grace period for switching frameworks. The 1998 booklet is retired. The 2026 standards are active. If your next examination starts in September, your RCSA, your concentration framework, and your board-level documentation need to reflect what examiners will actually be looking for — not what they were looking for three years ago.

External Resources

• OCC Bulletin 2026-29: Loan Portfolio Management
• OCC Semiannual Risk Perspective — Spring 2026
• OCC News Release NR-OCC-2026-35: New Loan Portfolio Management Booklet
• OCC Comptroller’s Handbook — Lending Index
• Federal Register: OTS Integration Rule — Thrift Supervision Transfer