Topic: Cybersecurity
-
NIST: National Institute of Standards and Technology, U.S. Department of Commerce – Cybersecurity Framework & Resource Center
Helping organizations to better understand and improve their management of cybersecurity risk
-
CISA: Cross-Sector Cybersecurity Performance Goals
A common set of protections that all critical infrastructure entities – from large to small – should implement to meaningfully reduce the likelihood and impact of known risks and adversary techniques. […]
-
NCUA: Letter to Credit Unions No. 25-CU-01 – NCUA’s 2025 Supervisory Priorities (January 2025)
This letter outlines the NCUA’s supervisory priorities and other updates to the agency’s 2025 examination program. Our priorities focus on the areas posing the highest risk to credit union members, […]
-
FFIEC issues IT “Development, Acquisition, and Maintenance” booklet and will sunset its Cybersecurity Assessment Tool
NEWS: The Federal Financial Institutions Examination Council (FFIEC) – a group of federal financial regulators that includes the NCUA – has issued a new booklet to help examiners assess information technology […]
-
NCUA’s 2024 Supervisory Priorities
NEWS: The NCUA outlined its 2024 supervisory priorities and examination focus areas in its Letter to Credit Unions 24-CU-01. The NCUA will continue to conduct onsite and offsite examination and supervision activities. […]
-
Responding to vendors’ cyber events
Q&A: Here’s a question that a Wisconsin credit union recently asked The League’s Legal Affairs team, along with our answer. Do you have a compliance question? Contact The League’s Compliance Hotline […]
-
NCUA issues guidance on Sept. 1 Cyber Incident Notification Requirements rule
NEWS: Beginning on September 1, 2023, all federally insured credit unions must notify the NCUA as soon as possible, and no later than 72 hours, after the credit union reasonably believes […]
-
New Cyber Incident Reporting Rule and Webinar
NEWS: The NCUA will host a webinar on August 2, 2023 at 1 p.m. CDT to provide more information on the new Cyber Incident Reporting Rule that takes effect on September 1, 2023. You […]
-
NCUA OKs 72-hour deadline to report “cyber incident”
NEWS: Today, the NCUA Board unanimously approved a final rule that requires a federally insured credit union to notify the NCUA as soon as possible, within 72 hours, after it reasonably believes that […]
-
Are credit unions required to report cyber-events through Suspicious Activity Reports (SARs)?
TIP: This Compliance Courier was prepared by one of The League’s Compliance Specialists – Julie Jennerjohn. She is a CUNA-certified Bank Secrecy Act Compliance Specialist (BSACS), as are all of our […]