Federal and state agencies and regulators have a variety of resources to help banks, credit unions and other financial institutions protect themselves from hackers and other cyber threats. Here are a few resources that may be helpful:

The Federal Financial Institutions Examination Council developed the Cybersecurity Assessment Tool to help financial institutions identify their risks and determine their cybersecurity preparedness. The assessment tool provides a process for financial institutions to measure their cybersecurity preparedness over time. The assessment provides an overview for chief executive officers and boards of directors to enhance their oversight and managementof their institution’s cybersecurity, as well as a user’s guide and risk profile to help institutions identify risk and determine their cybersecurity maturity. The FFIEC’s Cybersecurity Awareness page also has other cybersecurity resources for financial institutions, including information about different cyber threats, a cybersecurity webinar/video and a cybersecurity brochure.

This guide, developed by the FDIC, provides cybersecurity information for financial institutions’ employees and business customers about how to safeguard computer system and data. The guide includes information on how protecting computers and networks, controlling access to data and computers, establishing security practices and policies for employees, and training employees to be careful when connecting to the internet, as well as about the dangers of suspicious emails. It also provides information for employees and business customers about security software and updates, backing up valuable data and systems, securing mobile transactions, and watching for fraudulent transaction and bills and unauthorized withdrawals.

Released in 2014 by the Conference of State Bank Supervisors, this guide is targeted at bank CEOs, senior executives and board members. It provides them with industry-recognized standards and best practices to mitigate cybersecurity threats at their banks. The guide is organized according to five core cybersecurity functions of the National Institute of Standards and Technology’s Cybersecurity Framework. It provides information about how to identify internal and external cyber threats; protect organizational systems assets and data; detect data breaches, system intrusions or unauthorized access; respond to a potential cybersecurity event; and recover from a cybersecurity event by restoring normal operations and systems.

The National Credit Union Administration maintains a cybersecurity resources page on the agency’s website. The site includes an NCUA Examiner’s Guide with information used by examiners when assessing risks, including cybersecurity, in evaluating credit unions. The webpage also contains cybersecurity resources from other agencies, including a list of frequently asked questions about the FFIEC cybersecurity assessment tool. The page also includes information on industry best practices for protecting privacy and personal data, and information sharing forums about cyber threats.

More inside this guide