On January 7, 2025, the National Credit Union Administration (NCUA) published its annual supervisory priorities via\u00a0Letter 25-CU-01<\/strong><\/a>. Less than 2 weeks later, President Trump was inaugurated and former NCUA Chair Todd Harper passed the baton to new Chair Kyle Hauptman on the afternoon of January 20. A\u00a0regulatory freeze<\/strong><\/a>\u00a0was enacted on Inauguration Day to foster time for new agency heads to review any rules in process. All to say, recent changes in Washington D.C. could impact the NCUA priorities outlined below. As the proverbial saying goes\u2026\u201cStay tuned!\u201d<\/p>\n The impending change in administration and allowance of time for the dust to settle after transition served as a precursor for a generally unchanged regulatory agenda from 2024. Emerging risks identified by the NCUA did not include any surprises, and the following remain at the forefront of the agency\u2019s focus during examinations:<\/p>\n Cybersecurity remains a challenge for all industries and service providers as sophistication and complexity of bad actors continues to rapidly increase. Breaches, fraud, and malicious attacks can be damaging financially to credit unions as litigation is rampant. With the ease and speed of social media use, news of an incident can be accelerated across multiple platforms and detrimental to a credit union\u2019s reputation within seconds.<\/p>\n Responsible\u00a0third-party (vendor) risk management<\/strong><\/a>\u00a0of critical providers is also an expectation that will continue to linger during examinations. Regardless of who is performing the service on the credit union\u2019s behalf, responsibility to membership remains with the credit union, and the NCUA reiterates there are no exceptions to this rule.<\/p>\n Responsibility to report cyber incidents to NCUA within 72 hours also includes those endured by service providers, and the agency published a\u00a0Quick Reference Guide<\/strong><\/a>\u00a0on January 8 to facilitate reporting and provide the when, how, and what (and what not) to report.<\/p>\n The NCUA has made it clear that credit union boards must prioritize cybersecurity as a top oversight and governance responsibility. Being familiar with the\u00a0Information Security Examination Program<\/strong><\/a>\u00a0last updated in September 2024 is key in understanding the NCUA\u2019s perspective and planning around this extremely important area.<\/p>\n Consumer Financial Protection<\/strong><\/p>\n Examiners have indicated particular focus on the following consumer financial protection areas, and the scope of examination is tailored based on complexity and product offerings:<\/p>\n Notably, the NCUA published data on Non-sufficient Funds (NSF) and Overdraft (OD) fees on January 17, which revealed interesting results. Charts within indicated higher fees did not associate with more favorable interest rates for members, so we recommend particular attention to this area. The political transition undoubtedly will result in changes to leadership at the Consumer Financial Protection Bureau (CFPB) and subsequently Unfair, Deceptive, or Abusive Acts or Practices (UDAAP) initiatives outlined in the NCUA\u2019s\u00a0Letter 24-CU-03<\/strong><\/a>\u00a0from December 2024.<\/p>\n Credit, Liquidity & Market Risks<\/strong><\/p>\n Credit, liquidity and market risks will always be critical to understanding the overall financial health of credit unions and typically remain as constant priorities during examination. The rising rate environment during the last few years continues to stress balance sheets, and credit card and used vehicle lending continues to deteriorate. The charge off rate for these categories is at the highest level on record. Examiners plan to delve deeply into the effectiveness of loan underwriting guidelines and collection programs of these two loan types. Examiners will also continue to evaluate contingency planning and sources of liquidity through evaluation of the appropriateness of asset-liability management and concentration policies.<\/p>\n Other Items to Consider<\/strong><\/p>\n A flexible and \u201crisk-focused\u201d approach to examinations \u2014 and the cadence for examinations \u2014 will be dependent on CAMELS rating and any changes to the Chief Executive Officer (CEO) role since a credit union\u2019s last exam.<\/p>\n Somewhat surprisingly, Anti-Money Laundering\/Combating the Financing of Terrorism (AML\/CFT) risks were not explicitly noted as a\u00a0priority<\/em>, but the NCUA strongly encourages credit unions to remain on the lookout for potential changes to regulatory requirements that may result from the\u00a0Financial Crimes Enforcement Network (FinCEN) proposal<\/strong><\/a>\u00a0from June 2024 to modernize AML\/CFT programs, notably related to national priorities and de-risking strategy. There may be no movement in this area due to the regulatory freeze, but commitment to counter illicit activities is not only expected of credit unions but critical to the overall health of the financial system.<\/p>\n What\u2019s Next: Recommended Action Steps<\/strong><\/p>\n If there is a priority or area of risk at your credit union that is deemed ambiguous or heightened because of recent or impending changes to membership, products and services, or other strategic initiatives, gather appropriate internal parties to conduct a risk assessment and thoroughly evaluate controls. Seek external support for an objective perspective when necessary.\u00a0ViClarity\u2019s compliance experts can assist you<\/strong><\/a>, or you may find resources through your credit union league.<\/p>\n If your credit union feels confident in all focus areas, ensure timely audits, risk assessments, and monitoring is in place to validate that practices and procedures are consistently applied. The board of directors is responsible for top oversight and governance, so communicate and report often any self-identified gaps and progress of remedial action plans.<\/p>\n When in doubt, reach out directly to your Examiner in Charge. Openly communicate any self-identified deficiencies or challenges with actions plans so there are no surprises for either party.<\/p>\n The change in the administration also may affect the priorities described here, and this potential uncertainty requires us all to remain very diligent and up-to-date on information coming out of Washington, D.C.\u00a0<\/p>\n <\/p>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n ","protected":false},"excerpt":{"rendered":" [et_pb_section fb_built=”1″ _builder_version=”4.9.4″ _module_preset=”default” custom_padding=”0px|||||”][et_pb_row _builder_version=”4.9.4″ _module_preset=”default” custom_padding=”0px|||||”][et_pb_column type=”4_4″ _builder_version=”4.9.4″ _module_preset=”default”][et_pb_text _builder_version=”4.9.4″ _module_preset=”default”] By\u00a0Katie Ferrell, Vice President of Compliance Services On January 7, 2025, the National Credit Union Administration (NCUA) published its annual supervisory priorities via\u00a0Letter 25-CU-01. Less than 2 weeks later, President Trump was inaugurated and former NCUA Chair Todd Harper passed the baton […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"on","_et_pb_old_content":"","_et_gb_content_width":""},"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/www.ncultheaffiliate.com\/index.php?rest_route=\/wp\/v2\/posts\/5551"}],"collection":[{"href":"https:\/\/www.ncultheaffiliate.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ncultheaffiliate.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ncultheaffiliate.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ncultheaffiliate.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=5551"}],"version-history":[{"count":0,"href":"https:\/\/www.ncultheaffiliate.com\/index.php?rest_route=\/wp\/v2\/posts\/5551\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.ncultheaffiliate.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=5551"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ncultheaffiliate.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=5551"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ncultheaffiliate.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=5551"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}\n
Cybersecurity<\/strong><\/p>\n\n
![\"\"](\"http:\/\/www.ncultheaffiliate.com\/wp-content\/uploads\/2021\/08\/ViClarityLogo2020-e1629119922156.png\")
Learn more about ViClarity\u2019s\u00a0<\/em>compliance support<\/em><\/strong><\/a>\u00a0and\u00a0<\/em>audit and review services<\/em><\/strong><\/a>, or reach out to us at\u00a0<\/em>info@viclarityus.com<\/em><\/strong><\/a>.<\/em><\/p>\n