The Blog / Category: Information Technology

IT Examination Resource Guide

The American Bankers Association released a guidebook and companion to the FFIEC IT Information Security Booklet, which reformats the exam booklet into a checklist with direct links to cross-referenced statutes, regulation and guidance. Passwords to access the blog posts, and blog posts are only for CSG owners and retained clients. These should not be shared… Read More »

Customer-Authorized Financial Data Sharing and Aggregation

The CFPB released its outline of principles for protecting consumers when they authorize third party companies to access their financial data to provide certain financial products and services (think – digital wallets).  The principles are intended to help foster the development of innovative financial products and services, increase competition in financial markets, and empower consumers to… Read More »

Update to Cybersecurity Assessment Tool

The FFIEC released an update the the Cybersecurity Assessment Tool.  This update to the Assessment addresses changes to the FFIEC IT Examination Handbook by providing a revised mapping in Appendix A to the updated Information Security and Management booklets. The updated Assessment will also provide additional response options, allowing financial institution management to include supplementary… Read More »

WA DCU Bulletin B-17-12 WannaCry Ransomware Exploit

The DCU released bulletin B-17-12 regarding the recent WannaCry Ransomware. WannaCry Ransomware Exploit As you probably are aware, a widespread ransomware campaign is affecting various organizations with reports of a large number of infections in many countries, including the United States. Currently, the latest version of this ransomware variant is recognized as WannaCry, WCry, or… Read More »

dot creditunion

From CUNA News 03/28/2017: CUNA, with the generous support of CUNA Mutual Group and CO-OP Financial Services, was able to secure the rights to the .creditunion domain from the Internet Corp. for Assigned Names and Numbers (ICANN). Beginning this summer, credit unions will be able to register and use a .creditunion domain name of their… Read More »

NASCUS Cybersecurity Symposium

On March 24, the DCU published bulletin B-17-09 regarding the NASCUS Cybersecurity Symposium June 5-6 in San Diego, CA.  The bulletin is reprinted below. NASCUS Cybersecurity Symposium, June 5-6, 2017 Make plans to attend the NASCUS Cybersecurity Symposium San Diego, CA Division of Credit Unions (DCU) encourages credit unions to continue training on cybersecurity. While… Read More »

Oregon – Proposed HB 2581 Access Device and Security Breaches

Proposed House Bill 2581 would require a person that possesses or has access to account information to report breach of security to the financial institution that issued financial access device.  Person includes:  an individual, a private or public corporation, partnership, cooperative, association, estate, limited liability company, organization or other entity. The Bill proposes to: Require… Read More »

ADA Website Accessibility Tools

The Department of Justice recently published an “ADA Best Practices Tool Kit,” which includes website accessibility guidance and a checklist that can be used to verify compliance with the Americans with Disabilities Act. While the tool kit is primarily geared toward state and local governments, which are governed by Title II of the ADA, it… Read More »

Website Compliance Exams

The Washington State DCU plans on restarting to conduct website compliance exams beginning mid-December.  These exams will not be performed in conjunction with regular safety and soundness examinations, nor will there be giving a separate website compliance rating. Examiner’s concerns and findings will be included in a separate website compliance exam report. The exam report… Read More »

Compliance Services Group Copyright 2026.© All Rights Reserved | Privacy Policy

No Legal Advice Intended

The information on this website is provided as a service to our clients and visitors. The contents of this website, and the posting and viewing of the information on this website may convey information that can be characterized as “law related services” as defined by Rule 5.7 of the Rules of Professional Conduct (“RPC”) governing lawyers, but should not be construed as, and is not intended to be legal services, legal advice, or forming a client-lawyer relationship. Since CSG is not engaged in the practice of law, neither our services nor our relationship will be governed by the RPCs governing lawyers including, but not limited to, specific RPC rules applicable to privileged communications and prohibitions of conflicts of interest. While CSG uses reasonable efforts to include accurate, up-to-date information on this website, CSG makes no warranties or representations as to its accuracy and assumes no liability or responsibility for any errors or omissions in the content of this website or any third-party websites accessed through links from this website.

Formal Agreement Required for Services

You cannot engage CSG to render services for you through e-mail. CSG is not committed to provide services of any kind to you unless a formal services agreement has been executed by both you and CSG. CSG makes no commitment to you to maintain the confidentiality of any e-mail you send to us nor to respond to any e-mail.

Copyrights

Except for information in the public domain, or whether other ownership is acknowledged, CSG owns the copyright to this web site and all of its content. You may not copy or distribute materials from this web site except for personal, noncommercial use.

Links

Links provided by this web site are to assist our clients and visitors in identifying other useful resources and are not intended to state or imply that CSG sponsors or is associated with these resources or endorses or recommends any of the third party information, products, or services found there.

Compliance Services Group
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.