Sunset of FFIEC Cybersecurity Assessment Tool: What Now?

Audit & Accounting Compliance Directors Information Technology Operations Senior Management Senior Management & Directors IT & Cybersecurity

On-Demand Webinar

StreamedMay 19, 2025Duration60 minutes

Unlimited & shareable access starting two business days after live stream
Available on desktop, mobile & tablet devices 24/7
Take-away toolkit
Ability to download webinar video
Presenter's contact info for questions

See Registration Options

August 31, 2025, is the sunset date for the FFIEC’s Cybersecurity Assessment Tool.

Has your bank chosen an alternative tool? Do you know the pros and cons? Join us to learn the details about the available replacement tools and the necessary transition steps. This timely program will explain your options and how to stay in compliance with regulatory expectations.

AFTER THIS WEBINAR YOU’LL BE ABLE TO:

Understand regulators’ expectations regarding the transition to a new cybersecurity tool
Distinguish between the different cybersecurity tools available
Explain the guidelines and controls of the various tools
Recommend the tool best suited for your bank to the board of directors
Successfully transition your bank to the new cybersecurity tool

WEBINAR DETAILS

In August 2024, the FFIEC announced that its Cybersecurity Assessment Tool (CAT), which has been a key resource for banks in assessing cybersecurity preparedness, will sunset on August 31, 2025. After its sunset, banks should no longer use the CAT and should begin transitioning to an alternative tool now to ensure compliance with regulatory expectations. To start, you must understand the alternative tools available and choose the tool that is the right fit for your institution. This webinar will address the alternative tools, their pros and cons, and steps to successfully transition.

WHO SHOULD ATTEND?

This informative session is designed for board members, information technology officers, and compliance staff.

TAKE-AWAY TOOLKIT

Information on the various tools, including
- NIST Cybersecurity Framework 2.0
- CISA Cybersecurity Performance Goals
- CISA Cybersecurity Performance Goals: Sector-Specific Goals
- Cyber Risk Institute Cyber Profile
- Center for Internet Security Critical Security Controls
Employee training log
Interactive quiz
PDF of slides and speaker’s contact info for follow-up questions
Attendance certificate provided to self-report CE credits

NOTE: All materials are subject to copyright. Transmission, retransmission, or republishing of any webinar to other institutions or those not employed by your institution is prohibited. Print materials may be copied for eligible participants only.