Federal Financial Institutions Examination Council (FFIEC) – Cybersecurity Assessment Tool (CAT) Sunset

The (FFIEC) issued a statement that the Cybersecurity Assessment Tool (CAT)2, which was released on June 2015, will no longer be available on their website effective August 31, 2025.  The FFIEC has determined not to update the CAT, but to reflect new government resources, including the National Institute of Standards and Technology (NIST) Cybersecurity Framework 2.0, and the Cybersecurity and Infrastructure Security Agency’s (CISA) Cybersecurity Performance Goals.  The CAT was originally released as a voluntary assessment tool for financial institutions to help identify and minimize risks.  For more information, please refer to the attached CAT Sunset Statement by the FFIEC and refer to the Frequently Asked Questions (FAQ) created by the Conference of State Bank Supervisors (CSBS) to help answer any questions.   You can also visit the FFIEC website at https://www.ffiec.gov/cyberassessmenttool.htm.

Links from the OFI website to other websites are provided solely as a convenience to visitors. If you use these links, you will leave the OFI website.

OFI does not have any responsibility or control over any of these external websites, their content, or their privacy policies. We do not endorse or make any representations about third-party external websites, including any information, products, materials, or results that may be obtained from using them.

If you decide to access any of the linked third-party websites, you do so solely at your own risk. You are encouraged to review the privacy notice for each linked website.