# OCC Updates Cyber Audit Rules for Banks

> OCC modernizes cybersecurity audit framework for banks without new requirements
- Title: OCC Updates Cyber Audit Rules for Banks · Pymnts | Shortify
- Summary: OCC modernizes cybersecurity audit framework for banks without new requirements Banks must use existing cybersecurity tools but no new rules apply to their…
- Keywords: occ, cybersecurity, bank regulation, nist, ffiec, it examination, cyber audit rules, multifactor authentication, patch management, ai threats, business, finance
- Source: Pymnts — https://pymnts.com/legal/bank-regulation/2026/occ-updates-cyber-audit-rules-for-banks
- Author: PYMNTS
- Published: 2026-09-21T18:38:16+00:00
- Read time: 1 min
- Topics: occ, cybersecurity, bank regulation, nist, ffiec, it examination, cyber audit rules, multifactor authentication, patch management, ai threats, business, finance
## OCC updates cyber audit framework
OCC revised the Cybersecurity Supervision Work Program structure to align with updated NIST Cybersecurity Framework categories and subcategories.
## No new cybersecurity rules for banks
Banks do not need to implement new cybersecurity procedures; the OCC encourages but does not require standardized assessments.
## OCC rescinds old cyber bulletin
OCC Bulletin 2023-22 was canceled to reflect updated cybersecurity supervision practices.
## AI threat focus for banks
OCC warns banks about AI-driven cyber threats and recommends multifactor authentication and timely patch management.
## OCC prioritizes material risks
OCC aims to focus oversight on cyber and liquidity risks rather than procedural issues through tighter definitions.
## Key takeaway

Banks must use existing cybersecurity tools but no new rules apply to their cyber readiness