FFIEC Cybersecurity Assessment Tool (CAT)
What is FFIEC Cybersecurity Assessment Tool (CAT)?
The Federal Financial Institutions Examination Council (FFIEC) Cybersecurity Assessment Tool helps financial institutions identify cybersecurity risks and determine their preparedness. Based on the NIST Cybersecurity Framework, it assesses inherent risk profile and cybersecurity maturity across five domains. It comprises 491 controls organised across 5 domains, and applies in the United States (FFIEC).
How FFIEC Cybersecurity Assessment Tool (CAT) maps to other frameworks
All 491 controls, each one mapped to the equivalent requirement in other standards, with the evidence that carries across and the mappings that were judged and rejected shown alongside. No account needed to look.
See the control mappings →The 5 domains FFIEC Cybersecurity Assessment Tool (CAT) groups its controls into
Frameworks that share controls with FFIEC Cybersecurity Assessment Tool (CAT)
Each of these has at least one control mapped to a control in FFIEC Cybersecurity Assessment Tool (CAT). The number is how many FFIEC Cybersecurity Assessment Tool (CAT) controls are shared, counted from the mapping graph.
HKMA Cyber Resilience Assessment Framework (C-RAF)
12 shared controlsO-RAN WG11 Security Specification
11 shared controlsNIST SP 800-82 Revision 3: Guide to Industrial Control Systems (ICS) Security
10 shared controlsOWASP DevSecOps Maturity Model (DSOMM)
10 shared controlsNIST Privacy Framework
9 shared controlsGhana Cybersecurity Act
9 shared controlsFISMA
9 shared controlsMTCS (Singapore)
8 shared controlsWhere FFIEC Cybersecurity Assessment Tool (CAT) overlaps with the standards you already hold
Where to get trained on FFIEC Cybersecurity Assessment Tool (CAT)
One course in the catalogue covers FFIEC Cybersecurity Assessment Tool (CAT) directly. Each is self-paced, includes the downloadable toolkit and the implementation playbook, and carries a certificate of completion.
Training more than one person? Ten seats of any course is $1,490 on a single licence, against $199 a seat bought one at a time.
What an auditor will ask you for
All 49 FFIEC Cybersecurity Assessment Tool (CAT) controls, each with what it requires, the artefacts an auditor will ask you for, and where it commonly fails. Free to read, nothing to fill in.
Read the FFIEC Cybersecurity Assessment Tool (CAT) evidence request listWhat FFIEC Cybersecurity Assessment Tool (CAT) means in your sector
What FFIEC Cybersecurity Assessment Tool (CAT) means for your job
Questions people ask about FFIEC Cybersecurity Assessment Tool (CAT)
What is FFIEC Cybersecurity Assessment Tool?
How many controls does FFIEC Cybersecurity Assessment Tool have?
Where does FFIEC Cybersecurity Assessment Tool apply?
What frameworks does FFIEC Cybersecurity Assessment Tool map to?
How do I get started with FFIEC Cybersecurity Assessment Tool compliance?
Query FFIEC Cybersecurity Assessment Tool (CAT) programmatically
FFIEC Cybersecurity Assessment Tool (CAT), its 491 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
FFIEC Cybersecurity Assessment Tool (CAT) API reference and MCP config →What FFIEC Cybersecurity Assessment Tool (CAT) requires, control by control
Each page carries the requirement text for one FFIEC Cybersecurity Assessment Tool (CAT) control and what an assessor expects to see as evidence.
How ready are you for FFIEC Cybersecurity Assessment Tool (CAT)?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.