Credit Unions

What arrives

The Guidelines: 12 CFR Part 748, Appendix A, Guidelines for Safeguarding Member Information. A security program reported to the board at least annually.; Source
The 72-hour rule: NCUA cyber incident notification, 12 CFR 748.1(c). Notice to NCUA no later than 72 hours after a credit union reasonably believes a reportable cyber incident occurred.; Source
The ISE: NCUA Information Security Examination procedures, implemented in 2023 to standardize the examination of credit union information security and cybersecurity programs.; Source
The response program: 12 CFR Part 748, Appendix B. A response program for unauthorized access to member information, including member notification procedures.; Source