IT Security Compliance Guide for Credit Unions

GuidanceNational Credit Union Administration (NCUA)Information Security

The purpose of this letter is to provide NCUA’s IT Security Compliance Guide for Credit Unions.

The guide offers information to assist credit unions in complying with the NCUA Rules and Regulations, Part 748, Appendix A; Guidelines for Safeguarding Member Information, and Appendix B; Guidance on Response Programs for Unauthorized Access to Member Information and Member Notice. Each section of the guide relates to specific parts of Appendixes A and B of Part 748 of the NCUA Rules and Regulations. Section III provides additional guidance on the risk-assessment process necessary to identify reasonably foreseeable internal and external threats that could result in unauthorized disclosure, misuse, alteration, or destruction of member information or member information systems.

> Read entire regulation (log in required - registration is free)