NCUA Releases Updated ACET Application
On September 16, 2025, the National Credit Union Administration (NCUA) announced an update to their Automated Cybersecurity Examination Toolbox (ACET). Here's an overview of what's new.
Posts about:
On September 16, 2025, the National Credit Union Administration (NCUA) announced an update to their Automated Cybersecurity Examination Toolbox (ACET). Here's an overview of what's new.
"What is the difference between a risk assessment and a cybersecurity control self-assessment?"
Succession planning is essential for credit unions to ensure smooth leadership transitions and maintain operational stability. With the recent NCUA Succession Planning Rule, all federally insured credit unions are now required to have a formal succession plan. But how prepared are credit unions to meet this new requirement?
On December 17, 2024, the NCUA Board approved a final rule on the topic of Succession Planning. The rule goes into effect on January 1, 2026. In this article, we will dive into this topic and answer the questions you might be asking, including:
On Tuesday, October 24, 2023, the state bank regulators (CSBS), Bankers' Electronic Crimes Task Force, and United States Secret Service published an updated version of the Ransomware Self-Assessment Tool (R-SAT). In this blog, we'll discuss what the R-SAT is, what got updated, and what you need to do about it.
The FFIEC Cybersecurity Assessment Tool (CAT) has a rich history. The purpose of this article is to provide a comprehensive timeline of the FFIEC CAT and how its implementation has changed over the years. Bookmark this blog and be sure to come back to see updates as the topic continues to evolve.
Note: This article was updated on January 13, 2025. See the update log at the bottom of the article.
The NCUA's 2023 Supervisory Priorities stated that "to strengthen the examination process for cybersecurity, the NCUA developed and tested updated Information Security Examination procedures tailored to institutions of varying size and complexity. Examiners will use these new procedures in 2023."
Since 2017, we have experienced several changes in the NCUA IT examination process, from ACET, to InTREx-CU, to a new acronym, ISE. This article will tell you what you can expect in your 2023 exam and take you through a bit of the history of each acronym.
Phishing attacks are becoming more and more common as the years go on. You see phishing emails disguised as many things, from phony Microsoft 365 login pages to fake fantasy football sign ups. Nowadays we know two things when it comes to Phishing, your organization is not immune to attacks and employee training has never been more important.