Introduction. The absence of Russian corporate practice on the formation of a unified concept of internal control of commercial bank and methodological support of regulatory risk management process determines the relevance of the theory and methodology of approaches to the organization of internal control and management of regulatory risk in a business bank. Theoretical analysis. Regulatory risks are manifested with the emergence of the statutory or other regulatory legal act of direct or indirect exposure to the possibility of limiting the part of state bodies on the business processes of a commercial bank. Organization of management of the commercial bank regulatory risk consists in the activities of officials and divisions of companies, aimed at preventing and reducing the likelihood of regulatory risks, creating a comfortable legal environment for doing business. Empirical analysis. For the implementation of internal controls and facilitating the bank’s management bodies in ensuring its effective functioning, growth and development created the Internal Control as an element of internal control of commercial bank. Results. The vast majority of heads of departments recognize the usefulness and necessity of the implementation of measures to control the organization of regulatory risk, and is of particular importance not only to obtain regulatory risk level values expressed by a specific number, as the formation of the regulatory activity of the platform unit.