Introduction. The absence of Russian corporate practice on the formation of a unified concept of internal control of commercial bank and methodological support of regulatory risk management process determines the relevance of the theory and methodology of approaches to the organization of internal control and management of regulatory risk in a business bank. Theoretical analysis.