Cyber Risk Management & Oversight

Idrees Rafiq, AVP IT Consulting, Credit Union Resources, Inc.

NCUA’s initiative to increase the posture of cybersecurity is front and center with their soon to be released Automated Cybersecurity Examination Tool (ACET). Cyber Risk Management and Oversight is now 20% of this new initiative so it is imperative that board members, volunteers, and management know how to navigate through their responsibilities in the realm of cyber security. This session will be an overview of expectations and responsibilities of management and oversight guidance. It will give insight as to why shift in focus to cybersecurity and provide a guidance on cybersecurity incident response.

About Idrees Rafiq

Idrees Rafiq, Jr. is the assistant vice president of IT Consulting with Financial and Technology Resources, Credit Union Resources, Inc. 

In this position, Idrees provides information technology auditing, security, policy development, risk assessments, and compliance consulting. He specializes in leveraging IT and security-related issues with compliance, marketing, vendor management, business continuity, and other business operations specific to credit unions ranging from $2 million to more than $1 billion in assets.

Idrees is also experienced in network architecture, infrastructure, administration, management, and support. Prior to joining Resources, he was an IT director, project manager, and director of purchasing for a multi-million dollar international agency. 

He serves as the league liaison on the CUNA IT Council’s Executive Committee and the Cornerstone Credit Union League IT Council’s Executive Committee. He is an active contributor of the Credit Union Resources blog, the daily Leaguer, and Perspectives magazine publications, and he serves on the Southwest CUNA Management School faculty.

Notably, Idrees also serves on the executive leadership board of the National Credit Union Information Sharing and Analysis Organization (NCU-ISAO), a national group founded to advance credit union cyber resilience by providing a sustainable infrastructure connecting public and private-sector stakeholders that support security information sharing, coordinated response, education, and discounted products and services.

Idrees earned his MBA in management from Our Lady of the Lake University and graduated Delta Mu Delta with the International Business Honor Society. He also holds a BAAS and a Bachelor of Business Management from Howard Payne University.

View All Sessions