NCUA outlines teleworking risks to CUs
Following NAFCU’s discussion last week with the NCUA on its view of managing cybersecurity and privacy risks amid the coronavirus pandemic, the agency Tuesday issued a risk alert for credit unions deploying remote work policies.
NAFCU Senior Regulatory Counsel Elizabeth LaBerge provided additional insights into the discussion in a post of the association’s member-online Compliance, Risk & BSA Network. Read it here.
The NCUA’s risk alert notes that “[c]redit union employees working remotely should adhere to their organizations’ information security- and privacy-related policies and procedures.”
“Policies and procedures should effectively address remote work by preparing employees to prevent security incidents and including provisions for responding to any incidents that do occur,” the alert says. “Controls over remote work and use of personal devices should be based on an institution’s risk assessment, and commensurate with the size and complexity of the institution.”
continue reading »
