WASHINGTON—The Federal Financial Institutions Examination Council (FFIEC) recently released updates to the Cybersecurity Assessment Tool, updating the council's Information Security and Management booklets and response options.
The updates include a revised mapping in Appendix A to the updated Information Security and Management booklets. The assessment will also provide additional response options, allowing financial institution management to include supplementary or complementary behaviors, practices and processes that represent current practices of the institution in supporting its cybersecurity activity assessment, NAFCU reported.
“The assessment provides a repeatable and measurable process that allows credit unions to do self-assessments of their cybersecurity risk management strategies,” NAFCU said.
Last year, NAFCU created an interactive workbook to help member credit unions save time and get faster results when using the FFIEC’s Cybersecurity Assessment Tool. NAFCU said the member-only resource continues to be one of the most popular downloads on the association’s website.