Post-FFIEC CAT: Meeting Current Regulatory Cyber Expectations

FFIEC’s Cybersecurity Assessment Tool (CAT) may be phased out, but examiner expectations have not waned. This session will equip institutions to demonstrate robust, risk-based cybersecurity governance aligned with current frameworks. Participants will learn how to strengthen oversight, document board engagement, and align cybersecurity strategies with evolving supervisory guidance. Gain clarity on what regulators look for now, key pitfalls to avoid, and practical steps to prove your institution’s cybersecurity maturity.

The FFIEC Cybersecurity Assessment Tool (CAT) may be sunset, but regulatory expectations have not been relaxed. Examiners no longer accept use of the CAT as evidence of cybersecurity compliance. Instead, institutions are expected to demonstrate dynamic, risk-based, board-informed cybersecurity governance practices aligned with current frameworks and evolving threat environments. Is your institution prepared for your next exam? This practical webinar will walk you through cybersecurity oversight post-FFIEC CAT and how to align with current supervisory expectations.

• Employee training log
• Interactive quiz
• PDF of slides and speaker’s contact info for follow-up questions
• Attendance certificate provided to self-report CE credits