Compliance frameworks, security audits, and quality certifications this company maintains.
Regulatory
Basel III / G-SIB
CompliantCitigroup meets Basel III capital requirements as a Global Systemically Important Bank (G-SIB) with a Common Equity Tier 1 ratio of 13.6% (2024), above regulatory minimums inclusive of the firm's G-SIB surcharge, supporting its operation as a deposit-taking institution across 90+ countries.
Citigroup complies with Sarbanes-Oxley Act requirements, with CEO Jane Fraser and CFO Mark Mason certifying the accuracy of financial statements and the effectiveness of internal controls over financial reporting in each quarterly and annual SEC filing.
Citigroup maintains PCI DSS certification across its U.S. Personal Banking credit card infrastructure, covering $300B+ in managed card receivables and payment processing for millions of Citi branded, Costco Anywhere Visa, and American Airlines AAdvantage card transactions annually.
Citigroup's information security management systems are certified to ISO 27001 across its global technology operations, supporting the security of Citi's CitiDirect BE transaction banking platform and the firm's global payment and custody infrastructure spanning 90+ countries.
Citigroup complies with GDPR across all EU member states where it operates consumer and institutional banking services, maintaining designated Data Protection Officers and applying privacy-by-design to CitiDirect BE and Citi Wealth digital platforms used by European clients.
Citigroup operates a global Anti-Money Laundering and OFAC sanctions compliance program, required by the firm's presence in 160 countries including high-risk jurisdictions. Citi's correspondent banking network and TTS cross-border payments require extensive sanctions screening, with the compliance program overseen by the Chief Compliance Officer.
Citigroup's U.S. broker-dealer entities, including Citigroup Global Markets Inc., are registered with and regulated by FINRA and the SEC, complying with rules governing securities sales practices, trade reporting, customer protection, and net capital requirements for Citi's Markets and Banking divisions.
Citigroup aligns its climate-related financial disclosures with the TCFD framework, publishing annual reports on its Net Zero commitment and $1T sustainable finance goal. Citi discloses portfolio-level financed emissions for its energy, power, automotive, and commercial real estate lending segments.
Regulatory
OCC Consent Order
In ProgressCitigroup is actively remediating data management, risk, and control deficiencies identified in the 2020 OCC and Federal Reserve consent order, with the transformation program overseen by CEO Jane Fraser as the firm's top strategic priority. The $1B+ annual technology investment program targets resolution of legacy infrastructure issues by 2026.
Citigroup's European investment banking and markets entities comply with MiFID II requirements governing trade execution, best execution reporting, client categorization, and research unbundling, as Citi operates significant institutional banking and trading businesses across EU member states.