TREAS · 17 · record R2755

Reporting Requirement Analysis

Department of the Treasury · Office of the Comptroller of the Currency (OCC)

Overview

Development stage: In development or acquisitionSource: a) Pre-deployment – The use case is in a development or acquisition status.
High-impact designation: Not high-impactSource: c) Not high-impact
Impact justification: AI assists with reviewing and interpreting security reports but does not generate binding decisions or actions that impact individuals’ rights, benefits, or access to critical services.
Start date: Not reported
Withheld from public reporting: NoSource: a) No

Mission

Topic area: Information Technology
Operational functions: No function tag matched Derived by keyword rules; see methodology

Problem the AI is intended to solve

Reviewing lengthy, technical, and highly variable reports manually to ensure completeness, accuracy, and adherence to regulatory requirements is time-consuming and resource intensive. The AI is intended to streamline this process by analyzing the content for required elements, identifying gaps, and highlighting areas that may not meet reporting standards.

Expected benefits

The AI enhances efficiency and consistency, enabling staff to focus on higher-value evaluation and supervisory judgment. This supports the agency’s mission by improving the timeliness and quality of oversight related to information security and consumer data protection. The public benefits from stronger, more responsive supervision that promotes better safeguarding of sensitive customer information within financial institutions.

System outputs

The AI will produce structured analyses of each report, including summaries of key findings, identification of missing or incomplete elements, and observations tied to compliance requirements. Outputs may include checklists, gap analyses, and synthesized policy-relevant insights that assist staff in determining whether a report meets regulatory expectations. Final review and regulatory conclusions remain fully with human examiners.

Technology

AI classification: Generative AISource: Generative AI: AI that generates new or synthetic content (e.g., images, videos, audio, text, code).
System name(s): Not reported
Custom-developed code: Not reported
Public source code: Not reported

Sourcing

How it was built: Not reported
Vendor (as reported): Not reported
Vendors (standardized): None on the standard list

A vendor is the supplier named by the agency. It does not identify the underlying model or AI technology.

Data and privacy

Involves PII: Not reported
Privacy Impact Assessment: Not reported
Authorization to Operate: Not reported
Demographic features: Not reported
Training and evaluation data: Not reported
Federal Data Catalog: Not reported

Governance

0 of 8 minimum-practice questions answered. A blank answer means the agency reported nothing; it does not mean the practice is absent.

Pre-deployment testingNo answer reported

AI impact assessmentNo answer reported

Independent reviewNo answer reported

Ongoing monitoringNo answer reported

Operator trainingNo answer reported

Fail-safeNo answer reported

Appeal processNo answer reported

User and public consultationNo answer reported

Potential impacts and how they were identified

Not reported