DOR vs. Finding: What's the Difference?

A Document of Resolution (DOR) is a problem the National Credit Union Administration (NCUA) requires you to start fixing immediately, on a timeline the examiner sets, with named individuals accountable and a board resolution in your minutes. An Examiner's Finding is a problem you must also fix, but you choose the timeframe and the approach and can handle it in the normal course of business.

What the manual says each one is

Version 26.0 of the National Supervision Policy Manual (NSPM) defines a DOR on page 223. Problems in a DOR must be significant enough that an examiner would recommend escalating to the next level of elevated enforcement action, for example a Regional Director Letter (RDL) or a Letter of Understanding and Agreement (LUA), if you fail to correct them. DOR items are ones management must begin addressing immediately or within a compressed timeframe because of material financial risk, significant noncompliance with laws or regulations, or substantial safety and soundness concerns.

Findings get their definition fourteen pages later. They reflect problems management must address that do not currently threaten the credit union's viability or represent systemic violations. Management decides the timeframe and the approach, and that is the whole of the discretion. Findings generally state the problem and stop there, though an examiner may add a recommended corrective action when a credit union asks for guidance.

The bar for a DOR is higher than it used to be

This matters because your examiner may be working from the version of the manual they trained on. NSPM 10.0 put unsafe or unsound practices in the DOR bucket when they “reasonably threaten the stability of” the credit union. Version 26.0 raises that to practices presenting an immediate threat to a credit union's viability, and the Content Criteria section carrying that language was last updated on July 10, 2026. That is recent enough that plenty of examiners are still quoting the old standard from memory.

The compliance bullet moved in the same rewrite. 10.0 listed compliance violations that are systemic, recurring, or the result of willful neglect, with no further qualifier. 26.0 adds one: they must also pose a material financial risk to the credit union.

The checklist shrank too. 10.0 gave examiners five questions for qualifying a problem as a DOR, one of which asked whether the problem resulted from management's inability or unwillingness to properly identify, measure, monitor, and control the risk. 26.0 asks four, and that question is gone. What remains: serious financial or operational damage if left unresolved, significant noncompliance with laws or regulations, whether the problem would need escalation to a preliminary warning letter (PWL), an LUA, a cease and desist order, or conservatorship, and whether it is widespread.

So when an examiner says a regulatory violation automatically belongs in a DOR, the current manual does not say that. Expect the counter. Page 229 authorizes citing NCUA regulation § 741.3 for safety and soundness concerns presenting undue risk, and that is harder to beat than a bare violation citation. On BSA the threshold argument is unavailable, because the agreement between NCUA and the Financial Crimes Enforcement Network (FinCEN) puts those violations in a DOR by policy, leaving only the facts to contest.

What a DOR obligates you to that a finding doesn't

Page 229 requires that a DOR:

●       Identify the specific person or committee responsible for each item, by name and title

●       Include a timeframe for completion, and examiners are told not to write “ongoing”

●       Prioritize the items, with the most critical problems up front

●       Cite the specific section of the FCU Act, NCUA regulations, FCU Bylaws, or other authority

The same page tells examiners to request that the board enter a formal resolution into the minutes documenting agreement to resolve all DOR items. A finding carries none of those requirements.

Follow-up runs differently. Examiners generally follow up on DOR items within 120 days after the completion due date passes. Findings that will not materially impact the credit union may not warrant review at a subsequent contact, and an examiner can close one unreviewed, with a comment that management must address the issue in the normal course of business if it is not already resolved. The obligation survives the file closing.

Does a pile of findings turn into a DOR?

The manual says not automatically. Examiners are instructed not to escalate repeat findings automatically, and the exclusions on page 227 keep findings escalated solely because they went unresolved out of a DOR. What the manual does permit is a DOR aimed at the underlying management deficiency, meaning the absence of controls that would have closed those items.

Todd Miller, who spent his career at NCUA and taught examiner classes, gave the practical version on the podcast: assume findings you do not resolve in a material way will eventually find their way into a DOR. Steve Farrar reads the same pattern from the board's seat, where a long list of minor findings across multiple areas is NCUA signaling that the board should be asking about root cause.

Where the line is negotiable

A draft DOR is a draft, and placement is one of the things you can argue. A finding is less likely to move your CAMELS code, and it leaves you deciding the approach and the timing.

Two arguments carry weight. The first is factual: a DOR must concisely describe the problem including all supporting facts, so if what's written is opinion dressed as fact, press there. The second is threshold. Ask whether the problem presents an immediate threat to viability, using the current language rather than the older stability standard.

If you corrected the issue while the examiner was still on site, say so. Sometimes it comes out of the report entirely, and sometimes it stays with a note that the problem was resolved during the exam.

How this tracks to your CAMELS code

Miller described a feedback loop between ratings and issues. A code 1 almost never sees a DOR. A code 2 might see one or two, usually compliance or BSA related, because certain regulatory items are not significant on their own but rise to a DOR as violations of law. At a code 3, expect more DORs written to root causes, because the agency is trying to move you toward a 2 rather than down to a 4.

Reach out to learn how we assist our clients with NCUA so they save time and money.