Compliance kits and tools for community banks and credit unions

Policies, procedures, and workbooks written for chartered institutions, in the Bank edition of every kit. Built around what examiners ask for first: board oversight, a current risk assessment, a BSA/AML program that matches it, testing, and proof that findings get closed.

Bank edition: bank-only policies such as Reg CC, Reg O, CRA, and CTRs

Editable Word and Excel files, priced per institution

12 months of updates, with each file dated

What does an examiner expect to see on paper?

A compliance exam at a community bank or credit union starts with the same request list. The board-approved compliance management policy and committee charter. A compliance risk assessment and a BSA/AML risk assessment, each current. Procedures that match how the institution actually opens accounts, monitors activity, and handles disputes. A testing plan, the testing results, and an issue log that shows findings were validated before they were closed. Board reports that show directors saw all of it.

Most institutions have pieces of this. The gaps tend to sit between the pieces: a risk assessment that doesn’t drive the testing plan, a BSA/AML policy written for a product mix that has changed, or board reports that summarize activity without showing what changed. The kits are organized so each document points to the ones it depends on.

Credit unions use the Bank edition. Where NCUA rules differ, for example for BSA programs (12 CFR Part 748), Truth in Savings (Part 707), and privacy (Part 716), the documents carry NCUA NOTE callouts.

Start with the kit that matches the gap

Lending, deposits and payments, consumer protection and privacy, fraud, and operational risk each have a module kit too. Compare all 12 kits.

What changed for community banks in 2025 and 2026?

  • Fewer exams and a narrower MRA standard. On September 14, 2026, the OCC, Federal Reserve, and FDIC raised the asset ceiling for the 18-month exam cycle from $3 billion to $6 billion. An OCC and FDIC rule effective November 2, 2026 limits MRAs to practices likely to cause material harm and to violations of law. Weaknesses below that line become supervisory observations. What the two changes mean for your program.
  • A rewrite of the AML/CFT program rules. FinCEN and the OCC, FDIC, and NCUA proposed new program rules on April 10, 2026, with the risk assessment at the center. There is no final rule yet. Why the risk assessment carries the weight.
  • Replacement third-party risk guidance. The agencies, joined by the NCUA, proposed new third-party risk management guidance on September 11, 2026, with comments due November 16, 2026. What the proposal changes and what it doesn’t.
  • Changes in OCC supervision of community banks. The OCC’s quiet reset for community banks covers reputation risk, simplified BSA/AML exam procedures, and risk-based exam scoping.

Each change moves more of the job of finding problems early onto the institution’s own risk assessment, testing, and board reporting. Those are the documents the kits are built around.

Tools for one job

Individual tools are $149 each: the BSA/AML and sanctions risk assessment workbook (Bank edition), the compliance risk assessment workbook, the compliance testing plan, the board and committee compliance report, and the issue and corrective action log. Start with the free Regulatory Applicability Matrix and the free complaint log.

When you need a person, not a template

Key Compliance Group also provides compliance consulting for community banks and credit unions: fractional CCO and BSA Officer support, compliance and BSA/AML risk assessments, compliance testing, and exam preparation. Every engagement starts with a 20-minute call.

Not sure which kit fits?

Try the two free tools and the sample pages first, or ask about advisory support for a full program build.