Join us on LinkedIn Follow us on Twitter Like us on Facebook Follow us on Instagram
 
  OCTOBER RESEARCH STORE Already a subscriber? LOG IN
AddControlToContainer_DynamicNavigation4

Technology Corner

FFIEC to sunset cybersecurity assessment tool next year

Email A Friend Printer Friendly Version
0 comments
Technology Corner
Monday, September 23, 2024

The Federal Financial Institutions Examination Council (FFIEC) announced it plans on sunsetting its Cybersecurity Assessment Tool (CAT) on Aug. 31, 2025. The CAT has been helping financial institutions identify their risks and determine their cybersecurity preparedness since it was released in June 2015 as a voluntary assessment tool.

The tool addresses fundamental security controls throughout various CAT maturity levels to ensure they are sound, as well as several new and updated government and industry resources financial institutions can leverage to better manage cybersecurity risks, according to an FFIEC press release.

“After much consideration, the FFIEC has determined not to update the CAT to reflect new government resources, including the National Institute of Standards and Technology (NIST) Cybersecurity Framework 2.0 and the Cybersecurity and Infrastructure Security Agency’s (CISA) Cybersecurity Performance Goals. Supervised financial institutions can instead refer directly to these new government resources,” the release states. “CISA released Cross-Sector Cybersecurity Performance Goals in 2023 and is preparing to release Cybersecurity Performance Goals for the Financial Sector later this year. These resources were developed to help organizations of all sizes and sectors manage and reduce their cybersecurity risk in alignment with a whole-of-government approach to improve security and resilience. The FFIEC will discuss these resources during a banker webinar this Fall.”

Supervised financial institutions are advised to also consider industry-developed resources, such as the Cyber Risk Institute’s (CRI) Cyber Profile, and the Center for Internet Security Critical Security Controls. These tools can be used in conjunction with other resources (e.g., frameworks, standards, guidelines, leading practices) to better address and inform management of continuously evolving cyber security risk.

Covered entities also are advised to ensure any self-assessment tool(s) they utilize can support an effective control environment with respect to their risk profiles.

The FFIEC noted that it does not endorse any particular tool, it acknowledged that standardized tools can assist financial institutions in their self-assessment activities.

In response to the FFIEC’s decision, the National Credit Union Administration (NCUA) announced its Automated Cybersecurity Examination Tool (ACET) will continue to be supported and remain available for use by credit unions via the NCUA website.

“As geopolitical events evolve, credit unions of all sizes must understand and operate under the assumption that they remain targets of not just cybercriminals, but foreign nations that intend to cause harm to critical infrastructure in the United States—of which credit unions are a vital part,” the agency said in a press release. “As such, the NCUA encourages credit unions to use the ACET as a tool for assessing cybersecurity preparedness levels.”

The ACET is tailored specifically for credit unions and includes a user-friendly application interface, enhanced reporting features, and supplementary information. Credit unions are instructed to contact their local examiner with any questions or concerns.

Today's other top stories
Report: Appraisal Institute accused of covering up sexual harassment
Appraiser was trained in a ‘sink-or-swim’ environment
Cotality shares 10 things to know in the property market
TAF announces new State Harmonization Task Force project
UMW partners with ICE Mortgage to bring servicing in-house


COMMENT BOX DISCLAIMER:
October Research is not responsible for the comments posted on its websites by readers. We will do our best to remove comments that include profanity or personal attacks or other inappropriate comments.
Comments:

Be the first to leave a comment.

Leave your comment
CAPTCHA Validation
CAPTCHA
Code:
: 
: 
Your Email is for reporting purposes only. It will NOT be displayed.
Popularity:
This article has been viewed 728 times.

Print Edition - May 12, 2025

News by Topic   In-depth Reports   Events   Subscribe
Conference Coverage
Appraiser News
Commercial Corner
Legal News
Market Watch
Technology Corner
 
 
Expanding Your Appraisal Business
2025 State of the Industry
2024 Voice of the Appraiser
2024 Appraisal Technology
Marketing Your Business
Appraisal Bias
Archives
 
National Settlement Services Summit (NS3)
Women's Leadership Summit (WLS)
Webinars
 
Subscriptions
Free Email Updates
Try a Free Edition
News by Edition   About   Other Publications    
March 31, 2025
April 14, 2025
April 28, 2025
May 12, 2025
Archives
 
Valuation Review
Contact / Editors
Social Media
Advertise
Request a Media Kit
Are You An Expert?
Subscriber Agreement
 
Dodd Frank Update
RESPA News
The Title Report
The Legal Description
   
Copyright © 2002-2025 Valuation Review
An October Research, LLC publication
3046 Brecksville Road, Suite D, Richfield, OH 44286
(330) 659-6101, All Rights Reserved
www.valuationreview.com | Privacy Policy
VISIT OUR OTHER WEBSITES
> Dodd Frank Update
> RESPA News
> The Title Report
> The Legal Description
> NS3 The Summit
> Women's Leadership Summit
> October Research, LLC
> The October Store
Loading... Loading...
Featuring:
  • Delivery 3X a week plus breaking news as it happens
  • Comprehensive title insurance industry news
  • Recent acquisitions, mergers, real estate stats
  • Exclusive in-depth coverage of the industry's hottest stories
Featuring:
  • Delivery 2X a week plus breaking news as it happens
  • Comprehensive Dodd-Frank coverage
  • The latest information from the CFPB
  • Full coverage of Congressional hearings
  • Updates on all agency actions
  • Analysis of controversial provisions
  • Release of newest studies and reports
Sign up today and...
  • Be one of the first to know where NS3 is being held
  • Learn about NS3 speakers and sessions
  • Save on registration with Super-Early Bird rates
  • Discover the networking opportunities NS3 offers
  • Find out if CE credits will be offered for your area
  • And much more
Featuring:
  • Delivery 2X a week plus breaking news as it happens
  • Preview the latest RESPAnews.com Top Story
  • RESPA related headline news
  • Quote of the Week
Featuring:
  • Delivery 2X a week plus breaking news as it happens
  • Legal, regulatory and legislative information impacting the settlement services industry
  • News from HUD, Congress, state legislatures and other regulatory agencies
  • Follow the lobbying efforts of all the major national real estate services organizations.
Featuring:
  • Delivery 2X a week plus breaking news as it happens
  • The industry's only full-time newsroom
  • Relevant, up-to-date appraisal industry news
  • Covering the hottest stories and industry trends
NEWS BY TOPIC
NEWS BY EDITION
IN-DEPTH REPORTS
EVENTS
RESOURCES
FREE EMAIL UPDATES
ABOUT
SUBSCRIBE
Conference Coverage
Appraiser News
Commercial Corner
Legal News
Market Watch
Technology Corner
Sponsored Content
Current Edition
April 28, 2025
April 14, 2025
March 31, 2025
March 17, 2025
Archives
Expanding Your Appraisal Business
2024 Voice of the Appraiser
2025 State of the Industry
2024 Appraisal Technology
Marketing Your Business
Real Estate Compliance Outlook
Appraisal Bias
Finding & Training the Next Gen
Archives
National Settlement
Services Summit (NS3)
Women's Leadership
Summit (WLS)
Webinars
CFPB's Shake-Up & Its Impact
Technology Series
2025 Economic Outlook Series
Securing Your Cyber Network
Appraising Office Space Today
Compliance Series
Manufactured Housing
Eminent Domain
Keys For Operational Efficiency
Drones Do's and Don'ts
How to be an Expert Witness
Webinar Archives
Keys to Real Estate Podcast
Blog - Tuesdays with Mary
Executive Interview Series
Social Media
Valuation Review
Contact Us
Advertise
Request a Media Kit
Are You An Expert
Subscriber Agreement