Fannie Mae Issues Information Security and Business Resiliency Supplement Bulletin 26-01

October 28, 2026 / Source: Fannie Mae

This Bulletin is issued in accordance with the section of the Fannie Mae Information Security and
Business Resiliency Supplement (the “Supplement”) entitled General Requirements, Issued
Bulletins; Amendments. The purpose of this Bulletin is to notify Companies subject to the
Supplement that a new version of the Supplement has been published.

In addition to minor clerical and clean-up edits, including typo corrections, renumbering of
sections, reformatting and other similar modifications, the updated Supplement includes the
following substantive changes: