On September 5, the FFIEC announced the sunsetting of the Cybersecurity Assessment Tool (CAT) on August 31, 2025. The CAT, introduced in June 2015, was a voluntary tool designed to help financial institutions identify cybersecurity risks and assess preparedness. However, the FFIEC decided to discontinue the CAT because of the availability of new and updated resources that better address evolving cybersecurity risks — including the NIST Cybersecurity Framework 2.0 and the Cybersecurity and Infrastructure Security Agency’s Cross-Sector Cybersecurity Performance Goals. The FFIEC will remove the CAT from its website on the sunset date and will discuss the new resources during a banker webinar in the fall.