The Federal Financial Institutions Examination Council andits member regulators, which include the NCUA, have increasinglyfocused on cybersecurity in their assessments. Credit unions shouldexpect this to continue.

In the past, many examiners would skip over the IT portion of anassessment, but that has all changed. NCUA auditors will look underthe hood and focus on the cybersecurity plans of your credit union.With such a strong focus on cybersecurity, credit unions mustbe as prepared to explain their IT security measures as well asthey can explain their loan loss modeling and asset liabilitymanagement.

ERM Security, based in Charlotte, N.C., noticed credit unionsexperienced a great deal of ambiguity when it came to understandingwhat NCUA examiners would focus on in IT audits. To assist creditunions, ERM Security partnered with CU Times to develop anNCUA Audit Survival Guide. CU Times readers can downloadthe best-practices manual for free.

Download your free copy of the NCUA Audit Survival Guidehere.

"We decided it could benefit the industry as a whole byproviding a free resource with distilled actionable informationthat credit unions can take right now to both increase theirsecurity posture and leave them better prepared for their NCUAaudits," ERM Security Director David Brown said.