ACET access to continue despite sunset of FFIEC Cybersecurity Assessment Tool
Credit unions will still have access to the NCUA’s Automated Cybersecurity Examination Tool (ACET), even after the Federal Financial Institutions Examination Council’s (FFIEC) Cybersecurity Assessment Tool sunsets August 31, 2025. The NCUA announced Friday it will continue to support and make ACET available for credit union use, following the FFIEC’s announcement Thursday.
NCUA encourages credit unions to use the ACET as a tool for assessing cybersecurity preparedness levels. It is tailored specifically for credit unions and includes a user-friendly application interface, enhanced reporting features, and supplementary information.
The ACET also includes added information and reporting capabilities not found in the FFIEC’s Cybersecurity Assessment Tool.
“The NCUA will ensure the ACET remains relevant and current with the evolving cybersecurity landscape,” it said in a release Thursday. NCUA is planning updates to the ACET content to align with new standards and frameworks, such as the National Institute of Standards and Technology Cybersecurity Framework 2.0 and the Cybersecurity and Infrastructure Security Agency’s Cybersecurity Performance Goals.
“These updates will ensure that the ACET continues to meet credit unions' needs in assessing their cybersecurity stance,” according to the release.
NCUA’s Cybersecurity Resource Center contains additional tools and resources.