Want the short version? I can break this bill down for you
This is not an official government website.
Copyright © 2026 PLEJ LC. All rights reserved.
Requires covered large financial firms to appoint a qualified chief risk officer (CRO) and clearly defines the CRO’s duties. The CRO must set enterprise‑wide risk limits, run and monitor risk policies and systems, report directly to the board’s risk committee and the CEO, and quickly fix any weaknesses. If the CRO job becomes vacant, firms must notify regulators within 24 hours, submit a hiring plan within 7 days, and face consequences if the role remains unfilled after 60 days. Certain large banks that are not part of a bank holding company must also create a board‑level risk committee and appoint a CRO.
Amends Section 165(h) of the Financial Stability Act of 2010 (12 U.S.C. 5365(h)) by striking and inserting terms, redesignating paragraph (4) as paragraph (7), and inserting a new paragraph (4) establishing requirements for a chief risk officer.
Companies required by this subsection must appoint a chief risk officer selected from individuals with experience identifying, assessing, and managing risk exposures of large, complex financial firms.
The chief risk officer must establish enterprise‑wide risk limits and monitor compliance with those limits.
The chief risk officer must implement and maintain ongoing compliance with policies and procedures that establish risk‑management governance, risk‑management procedures, and risk‑control infrastructure for the company’s global operations.
The chief risk officer must develop and implement processes and systems to implement and monitor compliance with the policies described above, including: (I) processes and systems to identify and report risks and risk‑management deficiencies (including emerging risks) and to ensure timely actions to address them; (II) processes and systems to establish managerial and employee responsibility for risk management; (III) processes and systems to ensure the independence of the risk‑management function; and (IV) processes and systems to integrate risk management and controls with management goals and the company’s compensation structure for global operations.
Expand sections to see detailed analysis
Referred to the House Committee on Financial Services.
Introduced March 6, 2025 by Sean Casten · Last progress March 6, 2025
Referred to the House Committee on Financial Services.
Introduced in House