NU 2025 Conference Test: The Committee's Role in Cybersecurity Compliance

Thursday, June 19, 2025

The Committee's Role in Cybersecurity Compliance
Kian Moshirzadeh, CPA, Partner, TWHC

Cybersecurity compliance is a top priority for regulators in 2025. The supervisory committee plays a critical role in ensuring the credit union is effectively managing cybersecurity threats, including having the appropriate external audits and reviews completed.

Fields marked with an * are required.

Please verify that you have checked the “I'm not a robot” checkbox.

The frequency, speed and sophistication of cyberattacks have decreased over recent years.

The board should engage in ongoing education about current cybersecurity threats, trends, and best practices.

The board must approve a comprehensive information security program that meets the requirements of Part 748 of the NCUA’s regulations, which includes risk assessments, security controls, and incident response plans.

The board should work with management to provide periodic information security education for members to promote sound cybersecurity practices, such as the use of multi-factor authentication and the importance of strong, frequently changed passwords.

Cybersecurity is only an IT issue

Security best practices recommend using the same password for different accounts