Resources for:
The FFIEC CAT sunset happened last August, and for most institutions the response followed a familiar rhythm: pick a path, map the old work, get back to running the bank. If that's you, there's a date worth noticing. If your last Cybersecurity Assessment Tool refresh...
When the FFIEC CAT was sunset, it did more than create a gap in tooling; it created a gap in communication. The true value of the CAT was not just in the questions it asked, but in the structured way it enabled institutions to clearly communicate cybersecurity risk to...
Cybersecurity is no longer just an IT concern. For community banks, it is a core part of risk management, regulatory compliance, and board level governance. Yet many institutions still struggle to answer two basic questions: Are we doing enough? Can we prove it? These...
Finosec, a cybersecurity governance Saas company, announced a year of rapid product innovation in 2025, delivering over one hundred enhancements across its platform to help community banks and credit unions respond to increasing regulatory pressure, operational...
Finosec, an ICBA ThinkTECH Accelerator alumnus, today announced the launch of the Finosec Cybersecurity Assessment Tool, developed for community banks navigating the sunset of the FFIEC Cybersecurity Assessment Tool (CAT) in August. Finosec’s assessment tool provides...
Why Inherent Risk Still Matters Even if You’ve Already Chosen Your Framework Many community banks have already selected a cybersecurity framework to replace the FFIEC Cybersecurity Assessment Tool (CAT). NIST CSF 2.0 is one of the most popular choices, and for good...
After the August 31st sunset of the FFIEC CAT, community banks have either started to transition away or are confirming their plan and evaluating frameworks such as the Cyber Risk Institute (CRI) Profile, NIST Cybersecurity Framework (CSF 2.0), or CIS Controls. Each...
With the FFIEC CAT officially sunset on August 2025, banks are rethinking how they manage cybersecurity oversight. But one area that can’t get lost in the shuffle? Vendor management. In fact, third-party risk is getting more scrutiny, not less, under new guidance. The...
