FFIEC Cybersecurity Assessment Tool: Issues and answers to be covered

March 28, 2018

The FFIEC released a revised Cybersecurity Assessment Tool (CAT) in May 2017. The update incorporates mapping to changes in the FFIEC IT Examination Handbook, while also allowing for a greater range of responses that lets institutions describe circumstances that impact controls adoption and/or mitigate risks in other ways. This session on Tuesday, April 3, from 3:00 p.m. to 4:30 p.m., will summarize the changes, review case studies using the updated version, and address frequently asked questions related to application of the CAT to common situations.

For those participating in this webinar, you can expect to learn about:

  • Changes in the revised CAT tool
  • Compare CAT tool categories and specific controls to other common cybersecurity frameworks, such as the CIS critical controls and NIST security standards
  • Case studies of CAT implementation/completion from other financial institutions
  • Examples of compensating controls


After participating in this webinar, attendees will receive: References for framework comparisons; system and application hardening checklists; an employee training log; and a quiz you can administer to measure staff learning and a separate answer key.

This webinar is offered through the League's partnership with the CU Webinar Network. For more information or to register, please click here.