01
What actually changed
A side-by-side of the retired CAT versus the ACET Maturity Assessment, including how ACET statements now map to NIST CSF 2.0 — and what genuinely carries over from your last assessment.
On August 31, 2025 the Cybersecurity Assessment Tool was retired. The NCUA's ACET now maps to NIST CSF 2.0 — and boards are asking what changed, what carries over, and what to put in front of the next exam. This guide answers all three. No jargon, no checklists for their own sake.
Free · 14 pages · sent to your inbox immediately
We'll email the guide and occasional credit union security briefings. No spam, unsubscribe anytime. See our privacy policy.
The guide is on its way. If it doesn't arrive in a few minutes, check spam or email us directly.
A side-by-side of the retired CAT versus the ACET Maturity Assessment, including how ACET statements now map to NIST CSF 2.0 — and what genuinely carries over from your last assessment.
The documentation and maturity evidence NCUA examiners look for during the transition window, and the gaps that most often draw findings.
A board-ready sequence for moving your program onto CSF 2.0 without re-doing years of work — plus a one-page summary for your supervisory committee.