Risk Assessment Center

Share with Your Partners!

Have you developed a risk assessment format that you believe works well and satisfies the NCUA requirements?
Share your format with your CUSO partners! Submit a copy of your risk assessment
or the template you used (clean it up to remove any details you’d rather keep private, of course) to dmoore@cuanswers.com and
we’ll make sure it is posted here for others to learn from.

This website is designed to assist credit unions in completing their Internet Banking risk assessment as required by the “Guidance on Authentication in Internet Banking Environment” (NCUA letter 05-CU-18). You’ll find technical information and business considerations related to It’s Me 247 Online Banking and other internet based services. This page also includes links to additional resources that can help you in your own risk assessment process.

We hope you will find what you need here – please let us know if you have anything you’d like to contribute to make the site more helpful for you and your partners!


SecuriKey

CU*Answers receives a large number of cybersecurity due diligence requests from our clients. Although we have a vast library of resources, accessing all of this information – especially if there is an examiner in the room – can be challenging for credit union staff. With the need to revise or publish a significant amount of cybersecurity due diligence information, CU*Answers is publishing SecuriKey, Your Key to Cybersecurity.
SecuriKey

Each SecuriKey document will have the following features:

  • Quick Reference Guide (intended to be something a client can provide to examiners)
  • Summary of Features of the Service
  • Detailed Risk Assessment Tools
  • Ways for the credit union to engage with our teams (e.g. MOP has information for AuditLink for credit unions concerned with the Patriot Act)

CU*Answers is interested in any feedback your teams may have. In addition, CU*Answers is interested in any other internet-based software or services our clients would want us to add to the SecuriKey library.

SecuriKey Documents

Online and Mobile Banking

MOP – Membership Opening Process

MACO – Multi-Authentication Convenience Options

SecuriKey Forms

Want to be part of the discussion? Enter your email address below to be part of the SecuriKey email group. You can unsubscribe at any time.

Subscribe/Unsubscribe

Submit an Idea for SecuriKey


Other Resources

PIB

PIB
Understanding the PIB SystemUser manual and rollout instruction documents.
PIB Configuration/User Guide
Implementing PIB: Rollout Strategies A to Z
Updated
June 25, 2020

With this Powerful Service, Identify where Your Credit Union is ‘Losing the Love’ from Members

With this Powerful Service, Identify where Your Credit Union is ‘Losing the Love’ from Members

Losing the Love is a CU*BASE tool that helps credit unions study the behavior patterns of recently closed members.  Your staff can reference these patterns to see if any currently open memberships are displaying similar behavior. Losing the Love is also offered as a marketing service by Xtend, where we identify currently open memberships that… Read more »

Jun 19, 2020

Dealing with and Documenting Recent Unemployment Frauds – Video Recording

Dealing with and Documenting Recent Unemployment Frauds – Video Recording

In light of the recent spike in members who have received fraudulent unemployment claims generated by a Nigerian crime ring, it is becoming increasingly important to begin recording these events, for several reasons.  One reason is that it allows for management to evaluate the potential reputation risk this activity might have on your financial institution. … Read more »

Jun 18, 2020

A Note from SettleMINT: Understanding Vendor Requirements for Card Number Update Projects

A Note from SettleMINT: Understanding Vendor Requirements for Card Number Update Projects

In 2018, we sent a notification that we were working on an upcoming mandate (Visa Account Updater/Account Billing Updater) that would allow for credit unions to select old card numbers when replacing a new card.  During the process, we have discovered that each vendor required something different, and that our understanding of each vendor’s requirements… Read more »

Jun 18, 2020

News About the CU*Answers 2020 Leadership Conference

News About the CU*Answers 2020 Leadership Conference

As you know, the 2020 CU*Answers Leadership Conference has gone digital.  Since the conference was originally scheduled for today, here’s a quick recap of what’s happening. The 2020 Annual Stockholders Meeting and board election is being held via a live Zoom web conference at 4:30 PM ET on Wednesday, June 17th, 2020 (yep, that’s today!).  Registration… Read more »

Jun 17, 2020

We’re Here When You Need Us – Meet Jeff Miller, OpsEngine Business Development Manager

We’re Here When You Need Us – Meet Jeff Miller, OpsEngine Business Development Manager

Even as headlines change and new information is delivered frequently, CU*Answers is here to support our clients.  We are committed to keeping our daily operations running smooth as usual, and are ready to assist with any questions or concerns you might have. Today we’re placing the spotlight on Jeff Miller, OpsEngine Business Development Manager.  Jeff… Read more »

Jun 17, 2020

Join Us for a Review of Virtual StrongBox for Secure Document Exchange

Join Us for a Review of Virtual StrongBox for Secure Document Exchange

Virtual StrongBox and CU*Answers have received questions from your credit union peers on how to use the standard version of VSB digital vault to collect documents from members during these challenging times.  We will be hosting a webinar to help refresh your memory on powerful document collection, protection and exchange platforms integrated inside your CU*Answers… Read more »

Jun 16, 2020

Join Us for a Review of Recent Brute Force Attacks on ATM & Debit Card BINs

Join Us for a Review of Recent Brute Force Attacks on ATM & Debit Card BINs

On Presidents Day 2020 and during the weeks that followed, several CU*Answers clients experience brute force attacks on their ATM and debit card BINs.  The losses suffered were, in some cases, up to six digits.  This prompted the AuditLink and SettleMINT teams to take a deep dive and research how they happened as well as… Read more »

Jun 16, 2020