OCC Issues Cease and Desist Order Against MUFG Union Bank for Deficiencies Relating to Technology and Operational Risk Governance — 2021-09-20

WASHINGTON—The Office of the Comptroller of the Currency (OCC) today issued a Cease and Desist Order against MUFG Union Bank, N.A. The OCC took this action based on the bank’s unsafe or unsound practices regarding technology and operational risk management and the bank’s noncompliance with the Interagency Guidelines Establishing Information Security Standards contained in Appendix B to 12 CFR Part 30. The order requires the bank to improve longstanding technology and operational risk governance, technology risk assessments, internal controls, and staffing deficiencies to address the unsafe or unsound practices. The OCC attempts to address deficiencies through its ongoing supervision and expects banks to timely correct deficient practices. The OCC will issue an enforcement action against a bank to require the bank’s board of directors and management to correct deficiencies within required time frames.