CUNA News
  • LOG IN
  • Create Account
  • Sign Out
  • My Account
  • LOG IN
  • Create Account
  • Sign Out
  • My Account
  • Credit Union Magazine
    • Buyers' Guide
    • COVID-19
    • Digital Edition
    • Credit Union Hero
    • Credit Union Rock Star
    • Subscribe
    • Advertise
    • Contact
  • Advertise
  • Topics
    • Community Service
    • Compliance
    • Credit Union Hero
    • Credit Union Rock Star
    • Credit Union System
    • Directors
    • Human Resources
    • Leadership
    • Lending
    • Marketing
    • Operations
    • Policy & Issues
    • Sales & Service
    • Technology
  • Awards
    • Nominate Credit Union Hero
    • Nominate Credit Union Rock Star
  • Podcasts
  • Videos
  • Jobs
  • Contact

News

Home » Cyber incident proposal keeps focus on incidents impacting operations
Policy & Issues

Cyber incident proposal keeps focus on incidents impacting operations

September 26, 2022
NCUALogo

CUNA supports NCUA efforts to minimize the impact of cyberattacks on members and the credit union system through early alerts and information sharing, it wrote to the agency Monday. CUNA’s comments are in response to NCUA’s proposed rule that would require federally insured credit unions to notify NCUA of “reportable cyber incidents” within 72 hours of establishing “reasonable belief” that one has occurred.

“We are largely supportive of this proposal and appreciate the NCUA’s tailored focus on cyber incidents that interfere with the operations of a credit union and their member service,” the letter reads. “The final rule should provide clear and specific instructions to credit unions stating exactly what information should be reported. Also, the rule should limit duplicative reporting requirements and reduce the reporting burden for credit unions.”

CUNA also notes:

  • The definition of “reportable cyber incident” is largely consistent with industry standards and appropriately tailored to provide the NCUA with accurate, critical, and timely information regarding substantial cyber incidents.
  • NCUA must ensure the protocol remains focused on when the credit union obtained a reasonable belief of an incident, not when a third party made that determination.
  • The cyber incident reporting window should be no less than 72 hours, any changes from NCUA should only extend the time period.
  • The NCUA should implement a clear, streamlined, and accessible process for cyber incident reporting involving a single point of contact reachable by telephone or email.
  • The NCUA should not incorporate a 24-hour reporting window for ransomware attacks and should instead maintain a single 72-hour time frame for all reportable cyber incidents.

CUNA also requests NCUA provide additional guidance on how agency examiners will assess reported incidents during annual examinations.

KEYWORDS NCUA
Credit Union Magazine: Spring 2023

Spring 2023

Credit Union Magazine’s Spring 2023 issue features the 2023 Credit Union Heroes and examines CUNA-League advocacy priorities, board leadership, the impact of financial well-being efforts, fee-related compliance issues, predictions for the year ahead, and more.
Digital Edition •  Subscribe

Trending

  • CUNA Mascot Madness: Which mascots deserve a spot in the championship?

  • CUNA Mascot Madness: See the West winner and vote for the South champ

  • CFPB releases section 1071 small business lending final rule

Tweets by CUNA_News

Polls

Mascot Madness: Semifinal 1

Mascot Madness: Semifinal 2

View Results
More

Champion for the Credit Union Movement

Credit Union National Association is the most influential financial services trade association and the only national association that advocates on behalf of all of America's credit unions. We work tirelessly to protect your best interests in Washington and all 50 states. We fuel your professional growth at every level and champion the credit union story at every turn.

More CUNA

  • Membership
  • Contact Us
  • Careers

Resources for

  • Credit Union Advocates
  • Leagues
  • Press
  • Providers

Our Affiliates

  • American Association of Credit Union Leagues (AACUL)
  • Credit Union Awareness
  • Credit Union House
  • CUNA Strategic Services
  • National Credit Union Foundation
GET CUNA UPDATES
© 2023 Credit Union National Association | ADA Compliance Notice & Legal
Email Us