2 min read
Measuring Cybersecurity That Matters: KRIs Every Financial Institution Should Track
For regulators, auditors, and your board, good cybersecurity isn’t just about having controls in place—it’s about proving they work. That’s where...
NIST-CSF
1 min read
A Strong Defense Wins Championships—and Protects Your Data
In football, it’s often said that defense wins championships. The same principle applies to information security: the strength of your defensive...
2 min read
Why the FFIEC CAT Isn’t Your Risk Assessment—And What To Do Instead
With the upcoming sunset of the FFIEC Cybersecurity Assessment Tool (CAT) in less than three months, community banks are beginning to get nervous...
2 min read
From Compliance to Confidence
Building a Risk-Based Information Security Program for Community Banks For many community banks, passing a regulatory exam can feel like a victory...
4 min read
Beyond the CAT: Building on a Foundation That Lasts
Introduction As most bankers know by now, the FFIEC Cybersecurity Assessment Tool (CAT), first released in 2015, will officially sunset on August 31,...
2 min read
The Waning Days of the CAT Arrive
In late August, the FFIEC announced that they would sunset the Cybersecurity Assessment Tool (the “CAT”) on August 31, 2025. It had been apparent for...
