Posts about:
Tabletop exercises are a powerful tool for strengthening preparedness and resilience. When done well, they help validate plans, surface gaps, improve coordination, and prepare teams for real-world disruption, far beyond simply meeting a requirement.
Succession planning is essential for credit unions to ensure smooth leadership transitions and maintain operational stability. With the recent NCUA Succession Planning Rule, all federally insured credit unions are now required to have a formal succession plan. But how prepared are credit unions to meet this new requirement?
On December 17, 2024, the NCUA Board approved a final rule on the topic of Succession Planning. The rule goes into effect on January 1, 2026. In this article, we will dive into this topic and answer the questions you might be asking, including:
Businesses are expected to put their business continuity and incident response plans to the test. But what does that mean exactly? If the whole concept of exercises and tests is a bit murky, you've come to the right place. In this article, we'll answer some frequently asked questions, like:
On Tuesday, October 24, 2023, the state bank regulators (CSBS), Bankers' Electronic Crimes Task Force, and United States Secret Service published an updated version of the Ransomware Self-Assessment Tool (R-SAT). In this blog, we'll discuss what the R-SAT is, what got updated, and what you need to do about it.
Having a plan to continue operations in the event of adverse circumstances is a key part of doing business. This plan is often referred to as a Business Continuity Plan or a BCP.
On March 1, 2023, the Federal Home Loan Mortgage Corporation ("Freddie Mac") published Bulletin 2023-6. The bulletin announced an update to Freddie Mac's information security and privacy requirements. Here's an introduction to the requirements, as well as a summary of what's new, what's changed, and what you may need to do about it.
Since 2017, we have experienced several changes in the NCUA IT examination process, from ACET, to InTREx-CU, to a new acronym, ISE. This article will tell you what you can expect in your 2023 exam and take you through a bit of the history of each acronym.
On January 18, 2022, the Department of Homeland Security's Cybersecurity & Infrastructure Security Agency (CISA) released a new "Insights" memo with a title that is a direct call to action: Implement Cybersecurity Measures Now to Protect Against Potential Critical Threats.
On June 30, 2021, the Federal Financial Institutions Examination Council (FFIEC) released a new Architecture, Infrastructure, and Operations (AIO) booklet, as part of their IT Examination Handbook. This new booklet supersedes and replaces the previous Operations (OPS) booklet, incorporating and expanding on information technology topics in the context of enterprise goals and objectives.