<img src="https://ws.zoominfo.com/pixel/pIUYSip8PKsGpxhxzC1V" width="1" height="1" style="display: none;">

Concerns Surround the FFIEC Cybersecurity Assessment Tool

author Michael Berman
1 min read
Oct 22, 2015

Anthem, Target and JPMorgan Chase – guess what they all have in common? Correct: each has fallen victim to major security breaches as the result of cyber attacks. It’s also obvious no one is immune. Every industry conducting business online (a.k.a. every industry) can fall victim at any time.

When it comes to the financial industry, the threat is paramount. To fortify banks and credit unions against cyber-attacks, the Federal Financial Institutions Examination Council (FFIEC) released a new cybersecurity assessment tool this past June 2015. Prior to developing its Assessment Tool, the Council received feedback from community banks across the U.S. that the proposed tool would provide them with the benefit of achieving and maintaining their cybersecurity goals.

According to the Overview for Chief Executive Officers and Boards of Directors PDF,  (Cyber Assessment Tool, 2015) “… (the tool is) to help institutions identify their risks and determine their cybersecurity preparedness. The Assessment provides a repeatable and measurable process for institutions to measure their cybersecurity preparedness over time.”

Currently, the tool is optional. So, why is there rising concern over a cybersecurity tool deemed useful by more than 500 domestic banks? Financial industry news sources list one of the main criticisms of the tool cite a lack of flexibility that may prohibit a bank or credit union from using organization-specific information to assess the effectiveness and maturity of their cybersecurity protocols, as well as their ability to address any residual risks.

Credit Union Journal reporter, Ian McKendry, writes in his recent article Why Credit Unions Fear Regulators’ New Cybersecurity Tool,  (McKendry, 2015) “Credit unions and banks are increasingly concerned that an optional cybersecurity assessment tool released by regulators this summer could soon become mandatory…bankers have begun to fear that institutions that don’t use it could find themselves in regulatory crosshairs.”

Update: Ncontracts has an online version of the FFIEC’s Cybersecurity Assessment Tool called Ncyber. Check out how easy it is stay on top of your cybersecurity goals with this helpful tool.

Subscribe to the Nsight Blog

All Topics Risk & Compliance Product Insight Banks Lending Compliance Credit Unions Risk Management Fair Lending Nfairlending Cluster: Risk Management Compliance Lending Compliance Management Integrated Risk Blog Nrisk Regulatory Compliance Management News & Updates HMDA Risk Mortgage Lenders Ncomply Vendor Management Business Resiliency CRA Lending Compliance Blog Vendor CFPB Ncontinuity Third-Party Vendor Management Business Continuity Cybersecurity Fintech NVendor Strategic Planning Ncyber Ntransmittal Audits & Findings Company Culture OCC Regulatory Updates Audit Nverify Regulatory Compliance Exams FDIC Compliance Management Findings Nfindings NCUA Contract Management Employee Intranet Contract FRB Business Continuity Management FFIEC Findings Management Ncontracts manager Third-Party Vendors Enterprise Risk Management Vendor Risk ABA Bank Access Control Audit Findings Board Portal Call Report Due Diligence Efficiency Employee Engagement Exam findings FIEC Inc. 5000 Internal Audit Management Nboardportal Verify Wealth Management
Don’t Blow It at Exam Time - Pay Attention to the FFIEC Cybersecurity Assessment Tool
Risk & Compliance

Don’t Blow It at Exam Time - Pay Attention to the FFIEC Cybersecurity Assessment Tool

Nov 1, 2016 3 min read
Much Ado About Nothing: Update to the FFIEC Cybersecurity Assessment Tool Barely Worth a Mention
Risk & Compliance

Much Ado About Nothing: Update to the FFIEC Cybersecurity Assessment Tool Barely Worth a Mention

Jun 27, 2017 1 min read
3 Reasons Why Cybersecurity Ratings Are a Waste of Money
Risk & Compliance

3 Reasons Why Cybersecurity Ratings Are a Waste of Money

Apr 23, 2018 2 min read