Post on 09-Jul-2020
ACET Exam Preparation Collaboration Portal
Redstone Consulting Group
NCUA ACET Examination• Starting in 2019 it applies
to CU’s of $250M+
• Tracks NIST and FFIEC guidelines
• Many (530+) issues to resolve
• Many (60+) Document Categories to resolve
• Excel Workbook to use to prepare response
Redstone Consulting Group, LLC®
NCUA’s ACET Workbook not Designed for Collaborative Work
Redstone Consulting Group, LLC®
Lacks a Document Repository or ability to link documents
Sharing is difficult. Hard for multiple people to use Excel at one time
Collaborative responses are mostly feasible only inside of meetings
Tracking progress across a team requires manual assembly of inputs
Hard to know who is responsible for which Statements
Ensuring a multi-step workflow is followed is fully manual
Our Portal Resolves Excel Issues
• Moves Exam Preparation beyond Excel
• Simplifies Teamwork with a Single, Shared view of Information
• Automates Tracking and Progress Updates
• Provides a Shared Library of Responsive Documents
• Ensures Clear Ownership of Issues
• Improves Collaboration through Shared Comments
• Places Contextual Information at the Team’s Fingertips
Automating Daily Cat Herding
Redstone Consulting Group, LLC®
Technology Enabled Solution
• Containing all information on the effort
• Visible to all participants thru their views
• Collaboration centric work environment
Secure Cloud Repository
• Controls Issue resolution process
• Ensures consistent handling of each Issue
Automated, Tailorable Workflow
• Roles drive responsibilities in the workflow
• Assignments determine ownership of individual Issues
Clear Ownership of Issues
• Personal progress dashboard
• Team progress dashboard
• Domain maturity dashboard
ConstantlyUpdated Tracking
& Reporting
Redstone Consulting Group, LLC®
Workflow Driven
Redstone Consulting Group, LLC®
• Flexible workflow engine allows user to define process steps – on an item by item basis
• Items follow the chosen path, ensuring compliance with process.
• Issue status and ownership always available
• Outside review allows engaging consulting partners in focused areas
Role Based Permissions
Redstone Consulting Group, LLC®
Title Skill Set Function
Editor Expert in AreaIdentify & Upload Documents, Provide initial answers to Statements, add context, coordinate with other departments
Reviewer Expert in Area Vet the documentation and statement resolutions provided by Editor
ApproverExec. (ex CISO,
VP IT)Approve or Reject items that pass initial review. Provide commentary for the Examiner
Outside Review ConsultantIf included, provide industry perspective on how a CU responds to the statements. Review and OK or provide improvement suggestions
Releaser Int. Audits Assemble responses for Examiner. Perform final review prior to release
Oversight CEO, ERM Not part of workflow, oversees entire process, provides recommendations
Examiner NCUA Examiner Assess the CU’s Cyber Posture
Required Roles – System requires a minimum of an Editor, a Releaser, and an Examiner roleOptional Roles – These roles are not required and may be skipped when the system is configured
Redstone Consulting Group, LLC®
Prepare for SuccessCyber Exam Team
Prevent Last Minute SurprisesInternal Auditors
View Webinar – Select Icon Below
Friction Free Cat HerdingCISOs
Save Time and EnergyCIO / VP IT
Success with ACET PortalCyber Exam Team
Easy Tailoring for Each Credit Union
Redstone Consulting Group, LLC®
Assigning Ownership Ensures all Items are Worked
Redstone Consulting Group, LLC®
Documents Captured to Meet NCUA DRL
Redstone Consulting Group, LLC®
Simple Editing and Reviewing of Items
Redstone Consulting Group, LLC®
Evolving Maturity Level Visible to All
Redstone Consulting Group, LLC®
Dashboards Keep Project on Track
Redstone Consulting Group, LLC®
Redstone Consulting Group, LLC® - Confidential
• Visit Our Websitehttps://redstoneconsultinggroup.org/products/
• Contact Us DirectlyJim Bray
jdbray@redstoneconsultinggroup.org
(256) 344-8600
To Learn MoreIn Summary, ACET Portal
• Streamlines Exam Preparation
• Enables Secure Collaborationo Internally & Externallyo Single Repositoryo Workflow Driveno Role Based Assignment
• Reduces Efforts tied to Cyber Examo Integrated Progress Trackingo Reduces Examiner Time Onsiteo Reduces Exam Durationo Carries over Prior Year Work
Redstone Consulting Group, LLC® - Confidential