(a) Establishment
There is established within the Administration the Office of Credit Risk Management (in this section referred to as the "Office").

(b) Duties
The Office shall be responsible for supervising—

(1) any lender making loans under section 7(a) [15 U.S.C. 636(a)] (in this section referred to as a "7(a) lender");

(2) any Lending Partner or Intermediary participant of the Administration in a lending program of the Office of Capital Access of the Administration; and

(3) any small business lending company or a non-Federally regulated lender without regard to the requirements of section 650 of this title.

(c) Director

(1) In general
The Office shall be headed by the Director of the Office of Credit Risk Management (in this section referred to as the "Director"), who shall be a career appointee in the Senior Executive Service (as defined in section 3132 of title 5).

(2) Duties
The Director shall be responsible for oversight of the lenders and participants described in subsection (b), including by conducting periodic reviews of the compliance and performance of such lenders and participants.

(d) Supervision duties for 7(a) lenders

(1) Reviews
With respect to 7(a) lenders, an employee of the Office shall—

(A) be present for and supervise any such review that is conducted by a contractor of the Office on the premise ¹ of the 7(a) lender; and

(B) supervise any such review that is not conducted on the premise ¹ of the 7(a) lender.

(2) Review report timeline

(A) In general
Notwithstanding any other requirements of the Office or the Administrator, the Administrator shall develop and implement a review report timeline which shall—

(i) require the Administrator to—

(I) deliver a written report of the review to the 7(a) lender not later than 60 business days after the date on which the review is concluded; or

(II) if the Administrator expects to submit the report after the end of the 60-day period described in clause (i), notify the 7(a) lender of the expected date of submission of the report and the reason for the delay; and

(ii) if a response by the 7(a) lender is requested in a report submitted under subparagraph (A), require the 7(a) lender to submit responses to the Administrator not later than 45 business days after the date on which the 7(a) lender receives the report.

(B) Extension
The Administrator may extend the time frame described in subparagraph (A)(i)(II) with respect to a 7(a) lender as the Administrator determines necessary.

(e) Enforcement authority against 7(a) lenders

(1) Informal enforcement authority
The Director may take an informal enforcement action against a 7(a) lender if the Director finds that the 7(a) lender has violated a statutory or regulatory requirement under section 7(a) [15 U.S.C. 636(a)] or any requirement in a Standard Operating Procedures Manual or Policy Notice related to a program or function of the Office of Capital Access.

(2) Formal enforcement authority

(A) In general
With the approval of the Lender Oversight Committee established under section 657u of this title, the Director may take a formal enforcement action against any 7(a) lender if the Director finds that the 7(a) lender has violated—

(i) a statutory or regulatory requirement under section 7(a), including a requirement relating to credit elsewhere; or

(ii) any requirement described in a Standard Operating Procedures Manual or Policy Notice, related to a program or function of the Office of Capital Access.

(B) Enforcement actions
An enforcement action imposed on a 7(a) lender by the Director under subparagraph (A) shall be based on the severity or frequency of the violation and may include assessing a civil monetary penalty against the 7(a) lender in an amount that is not greater than $250,000.

(3) Appeal by lender
A 7(a) lender may appeal an enforcement action imposed by the Director described in this subsection to the Office of Hearings and Appeals established under section 634(i) of this title or to an appropriate district court of the United States.

(f) Regulations
Not later than 1 year after June 21, 2018, the Administrator shall issue regulations, after opportunity for notice and comment, to carry out subsection (e).

(g) Servicing and liquidation responsibilities
During any period during which a 7(a) lender is suspended or otherwise prohibited from making loans under section 7(a) [15 U.S.C. 636(a)], the 7(a) lender shall remain obligated to maintain all servicing and liquidation activities delegated to the lender by the Administrator, unless otherwise specified by the Director.

(h) Portfolio risk analysis of 7(a) loans

(1) In general
The Director shall annually conduct a risk analysis of the portfolio of the Administration with respect to all loans guaranteed under section 7(a).

(2) Report to Congress
On December 1, 2018, and every December 1 thereafter, the Director shall submit to Congress a report containing the results of each portfolio risk analysis conducted under paragraph (1) during the fiscal year preceding the submission of the report, which shall include—

(A) an analysis of the overall program risk of loans guaranteed under section 7(a);

(B) an analysis of the program risk, set forth separately by industry concentration;

(C) without identifying individual 7(a) lenders by name, a consolidated analysis of the risk created by the individual 7(a) lenders responsible for not less than 1 percent of the gross loan approvals set forth separately for the year covered by the report by—

(i) the dollar value of the loans made by such 7(a) lenders; and

(ii) the number of loans made by such 7(a) lenders;

(D) steps taken by the Administrator to mitigate the risks identified in subparagraphs (A), (B), and (C);

(E) the number of 7(a) lenders, the number of loans made, and the gross and net dollar amount of loans made;

(F) the number and dollar amount of total losses, the number and dollar amount of total purchases, and the percentage and dollar amount of recoveries at the Administration;

(G) the number and type of enforcement actions recommended by the Director;

(H) the number and type of enforcement actions approved by the Lender Oversight Committee established under section 657u of this title;

(I) the number and type of enforcement actions disapproved by the Lender Oversight Committee; and

(J) the number and dollar amount of civil monetary penalties assessed.

(i) Budget submission and justification
The Director shall annually provide, in writing, a fiscal year budget submission for the Office and a justification for such submission to the Administrator. Such submission and justification shall—

(1) include salaries and expenses of the Office and the charge for the lender oversight fees;

(2) be submitted at or about the time of the budget submission by the President under section 1105(a) of title 31; and

(3) be maintained in an indexed form and made available for public review for a period of not less than 5 years beginning on the date of submission and justification.