Prepare answers to the examiner questions.
Eight scoping questions. The supporting records each question needs. Your declared uses remain the boundary.
Who the CSBS framework covers.
The CSBS framework is a guide for state examiners reviewing state-chartered banks and state-licensed nonbank financial institutions. Each state decides how to use the framework. The framework creates no new legal obligations or supervisory requirements.
National banks answer to the OCC. Credit unions use NCUA and applicable state supervision. One review covers declared uses, rather than an institution-wide census.
CSBS framework and Core Examiner Guide, pages 3 and 4. Source checked October 4, 2026.
What examiners may ask.
| Examiner question, paraphrased | Where your answer lives |
|---|---|
| Where does the institution use AI across products and internal work? | Use and Where it runs; cross-check the vendor and software registers. |
| Which AI systems, tools and uses has the institution identified? | Use and Owner; supporting declared-use register. |
| Does AI face customers or influence decisions? | Use; purpose, impact and output-review records. |
| Which AI capabilities rely on vendors or external platforms? | Where it runs and Evidence on hand; vendor register. |
| Where is AI embedded in vendor products, and what have vendors disclosed? | Evidence on hand and Question still open; vendor documentation. |
| Which generative AI or large language model tools are used? | Use and Where it runs; approved tools and use policies. |
| How are uses separated by risk, impact and review needs? | Owner and Evidence on hand; risk ratings and review records. |
| What customer, confidential or sensitive information enters or passes through AI? | Data it can touch; data controls and vendor terms. |
CSBS framework and Core Examiner Guide, pages 3 and 4. Source checked October 4, 2026.
What examiners may request.
| Requested material | Supporting record |
|---|---|
| AI inventory | Declared uses, purposes and owners |
| Policies | AI rules, staff guidance and approved tools |
| Governance materials | Oversight and management or board records |
| Risk assessments | Risk ratings and use-case reviews |
| Vendor documents | Embedded AI and data-use terms |
| Monitoring | Performance, issues, testing and changes |
| Risk tier worksheet | Optional supporting assessment |
The risk tier worksheet is optional supporting material. The six-column file points to records; it does not replace policies, governance, risk assessments or monitoring records.
Keep the answer locations with the file.
Download the one-page checklist PDF Read the checklist in HTML
The questions are paraphrased from the guide. The answer-location mapping is LLM Squared's preparation method, rather than CSBS text.
The review boundary.
A review prepares a file. It does not certify compliance, give a legal opinion or connect to a core.