Automated Cybersecurity Examination Tool (ACET)
ACET is an automated tool required for Credit Unions by the NACU to measure their inherent risk profile and test maturity across five domains including cyber risk management and oversight, threat intelligence and collaboration, cybersecurity controls, external dependency management, and cyber incident management and resilience.
Credit Unions must maintain an ongoing information security risk assessment program that effectively:
- Gathers data regarding the information and technology assets of the organization, threats to those assets, vulnerabilities, existing security controls and processes, and the current security standards and requirements
- Analyzes the probability and impact associated with the known threats and vulnerabilities to their assets
- Prioritizes the risks present due to threats and vulnerabilities to determine the appropriate level of training, controls, and assurance necessary for effective mitigation
A strategy should be developed that defines control objectives & establishes an implementation plan. Security strategies should include:
- Appropriate consideration of prevention, detection, and response mechanisms
- Implementation of the least permissions and least privileges concepts
- Layered controls that establish multiple control points between threats and organization assets
- Policies that guide officers and employees in implementing the security program
Why Is SilverSky Your Partner for Meeting ACET Guidelines?
- As the preferred cybersecurity partner of CUNA, we have served more than 1,500 small to mid-sized financial institutions and have been held to the same stringent compliance regulations as many of our clients.
- We deliver technology that offers a holistic view of security across your company, not just a single technology area.
- Compliance reporting is much easier with flexible and easy data acquisition across your entire security architecture.
- We help streamline and centralize your monitoring and management. This means your IT teams are more efficient and free to perform functions that increase your overall security.
- We lessen the strain of technical and human resource complexity so you can continue to grow and add new services while being safe in the knowledge your defenses are stronger than ever.
- Supplement with consulting services to define and test your information security program.
“Our partnership with SilverSky has empowered us to offer members a number of innovative solutions often reserved for the largest enterprise banking organizations.”
-Frankie Duenas, CTO, Cabrillo Credit Union
You might be interested in…
This guide details how going all in for ACET protects customers and the health of community-based financial services.
Learn how banks are emerging from the COVID-19 pandemic with stronger than ever cybersecurity postures.
In a conversation with Andy Bober, SilverSky’s Executive Vice President of Product Management & Engineering, he discusses some of the pressing cybersecurity challenges businesses face and the true cybersecurity culture renaissance that is underway.
SilverSky Managed EDR has all the endpoint security essentials, including prevention, detection, and response, and adds desired security suite features, like device control and endpoint firewall control.