CUNA opposes an amendment to the Cybersecurity Improvement Act that would grant the National Credit Union Administration additional authority to supervise third-party vendors. CUNA wrote to Senate Majority Leader Mitch McConnell (R-Ky.) and Minority Leader Harry Reid (D-Nev.) Wednesday to outline its objections.

“We oppose this amendment because we believe it is unnecessary and would increase the regulatory burden to which credit unions are subject,” CUNA President/CEO Jim Nussle wrote. “In addition, we believe the scope of the amendment exceeds the scope of the legislation to which it is being proposed and should be considered first by the Banking Committee under regular order.”

CUNA adds that credit unions already face supervision for due diligence in third-party vendor relationships during regular examinations. In addition, a number of those vendors serve banks as well, and are thus subjected to supervision by banking regulators.

“We question what will be gained from this additional authority when credit unions are already required to perform due diligence on their third party relationships and such due diligence is presently subject to supervision by NCUA,” the letter reads. “We further question the need to extend this authority to credit union service organizations which are generally owned by credit unions, when NCUA is presently able to supervise them through the credit unions that own them.”

continue reading »