Proposed guidance from the Office of the Comptroller of the Currency is geared toward the biggest banks but also is raising concerns that it may gradually affect community banks, experts say. The proposal involves the "three lines of defense" approach, with more stringent expectations for internal audit, risk management and governance. The IIA said in a 2013 position paper that the approach should allow flexibility based on organizations' different situations.

Related Summaries