CUNA Cybersecurity Conference with NASCUS

Stand up to credit union cyber threats

As fraud and other cybercrimes continue to evolve, the task of protecting your credit union is becoming more complex.

Join CLA at the CUNA Cybersecurity Conference with NASCUS to explore a variety of popular and important cybersecurity topics and learn the latest strategies and tactics on how to help keep your data safe.

Don’t miss this valuable workshop presented by CLA’s Randy Romes:

PCI Readiness, Risk Management, and Compliance for Credit Unions

Monday, May 6 | 1:30 – 3 p.m.

The PCI DSS (Payment Card Industry Data Security Standard) has been in place for more than 15 years. With the release of version 4, there are significant changes in the framework of controls, processes, and technology configurations.

Credit unions find themselves in the position of functioning in multiple roles: card issuers, merchants, and in some instances service providers as they work to address demands for compliance reporting from examiners, business partners and service providers, and risk management and governance.

This session will address common misconceptions and challenges including:

• The card data is all encrypted so we don’t have to worry about it
• We outsource to XYZ so we are not responsible for compliance
• No one has asked us for a compliance report
• We can’t make the core system compliant so there is no point in the rest of it
• There is no electronic cardholder data in our VoIP system or our data warehouse or ...

This session will describe the latest updates to the compliance standard, explore common challenges, and provide clear strategies for how credit unions can better manage the risk and compliance needs related to credit card security.

Attendees will be given a variety of resources, including:

• Card holder data environment scoping flow charts
• Matrix of periodic required control activities
• Links to key documents provided by the Security Standards Council

Learning objectives:

• Understand how the core elements of the PCI DSS apply to credit unions
• Recognize key challenges faced by credit unions in managing a PCI compliance program
• Learn how a well-functioning PCI compliance program can support and enhance a credit union’s risk management program