AI Your Credit Union MFA Documentation Checklist

The FFIEC’s 2021 guidance on Authentication and Access concludes that single-factor authentication is no longer adequate for high-risk transactions and high-risk users. NCUA’s Information Security Examination assesses access control and vendor risk directly. This checklist helps you get the documentation in order before an examiner asks for it.

Note: This checklist covers member-facing authentication. Your exam will also assess workforce and admin access, which should be treated as a separate exercise.