FFIEC Cybersecurity Assessment Tool
Learn more about FFIEC's Cybersecurity Assessment Tool and why businesses should use this voluntary tool.
Finite State Team
The FFIEC Cybersecurity Assessment Tool (CAT), developed by the Federal Financial Institutions Examination Council (FFIEC), is a diagnostic test designed to help financial institutions identify, gauge, and improve on cybersecurity risks.
The CAT consists of two parts:
An inherent risk profile, which identifies an institution’s inherent risk based on factors like size, complexity, and business activities.
Cybersecurity maturity, assessing the current state of cybersecurity preparedness across five domains:
Governance and Risk Management
Data Security
Identity and Access Management
Security Awareness and Training
Incident Response and Resiliency
An inherent risk profile, which identifies an institution’s inherent risk based on factors like size, complexity, and business activities.
Cybersecurity maturity, assessing the current state of cybersecurity preparedness across five domains:
- Governance and Risk Management
- Data Security
- Identity and Access Management
- Security Awareness and Training
- Incident Response and Resiliency
The FFIEC CAT is not a compliance tool that guarantees compliance with specific regulations. It is just a tool that helps assess the risks, and its use is voluntary.
Finite State Team
The Finite State team brings together experts in cybersecurity, embedded systems, and software supply chain risk to help connected device manufacturers secure their products and comply with evolving global regulations.