That situation is generally uncovered by internal or external auditors, and like Randy mentioned the regulator's reaction will be based on what is/is not being done.
The examiners will review the audit reports ane management responses. Sometimes, if there are mitigating circumstances or compensating controls, there will not be an issue other than why doesn't the bank re-write the procedures.
_________________________
Integrity. With it, nothing else matters. Without it, nothing else matters.