Agencies sunsetting Cybersecurity Assessment Tool

Federal banking regulators said they are sunsetting the Federal Financial Institutions Examination Council the Cybersecurity Assessment Tool on Aug. 31, 2025.

Details: In a statement, the FFIEC said:

  • While the CAT, a voluntary tool released in 2015, remains sound, several new and updated government and industry resources are available to financial institutions.

  • Banks can use the National Institute of Standards and Technology Cybersecurity Framework 2.0, the Cybersecurity and Infrastructure Security Agency’s Cybersecurity Performance Goals, and CISA’s pending Cybersecurity Performance Goals for the Financial Sector.

ICBA Resources: Additional cybersecurity resources are available on ICBA’s Cyber and Data Security center.