The Alabama Credit Union League (ACUL) announced today that effective immediately it will provide a new Security Breach Response program to 81 of its participating member credit unions at no cost.  This decisive move represents a concerted effort on the part of the ACUL to proactively address the possible contingent damages created from future security breaches.  The ACUL has partnered with CyberScout, the leading provider of identity theft resolution and educational services, to provide this new service to those of its members belonging to the Credit Union Service Center network and/or those participating in the ACUL Card Services program.  

“More than 100 million records containing sensitive personal information were potentially exposed in database breaches since February 2005,” said Adam Levin, Chairman of CyberScout.  “Moreover, sixty percent of those breaches in the private sector involved either human error (including the theft of laptops) or software malfunction, dispelling the myth that technology alone will end the deluge of breaches.  Companies need to have an effective Incident Response Plan ahead of time to fully address the issue.  By offering this comprehensive solution, the ACUL is proactively responding to the real needs of its members; and it is worth noting that it is the first association in the country to provide this service at no charge.”

The Security Breach Response program from CyberScout is a highly unique, cutting-edge solution designed to address virtually every aspect of identity theft and security breaches that ACUL member credit unions could face.  The turnkey Incident Response Plan, an aspect of the service whose impact is thorough and immediate, helps the affected credit union more effectively and expeditiously manage any situation that might be construed as a security breach of personal information.  It is designed to minimize the negative impact of a breach on customers, employees, and other affected parties through pre-planned rapid response and effective communications.

“The growing prominence and increasing threat of security breaches in this country has major consequences on the ability of organizations, such as credit unions to conduct business effectively and maintain the trust of their members,” said Gary B. Wolter, President/CEO of the Alabama Credit Union League.  “This comprehensive program gives our participating member credit unions peace of mind and offers them an effective response mechanism should they have the misfortune to experience a security breach,” said Wolter.  “We are very pleased to provide this benefit and protection to our CUSC network members and ACUL Card Services clients.”

The Incident Response Plan was designed to assist institutional compliance with the guidelines provided in 12 CFR 748 (Appendix B)* as outlined by the National Credit Union Administration.  “This program helps to satisfy an important component of a credit union’s regulatory mandate provided by this rule,” said Eduard Goodman, General Counsel and Chief Privacy Officer for CyberScout.  Federally regulated credit unions are required to maintain written policies and procedures, all subject to audit, which outline their response to a security breach or database compromise. 

Under the program, the 81 credit unions are all treated equally, regardless of size.  “This represents a tremendous benefit to smaller credit unions with limited resources that can least afford the economic ramifications and negative goodwill that could result from a poorly managed response to a security breach,” said Levin.  “The ACUL’s decision to provide this service at no charge represents a landmark event in the credit union landscape.”

As part of the ACUL’s proactive Security Breach Response program, a participating member credit union will receive:

• Consulting services – You will have full access to CyberScout’s highly experienced breach managers. From the first moment a breach is suspected, these managers will help assess the severity of the situation, advise as to regulatory and consumer notification requirements, and craft a customized resolution and customer service program. 
• Identity theft resolution services – Should a breach occur, credit unions will have access to the CyberScout fraud department, where experienced advocates will work one-on-one with individuals from discovery through resolution. Additionally, members will have access to the full range of CyberScout’s proactive educational library. 
• Secure communications – The service includes the design and implementation of website specific solutions. These platforms are password protected and restrict access to enable highly secure communications to those affected in the event of a compromise. 
• Media interface – CyberScout will work with the credit union to create a point-by-point action plan to respond to media inquiries in order to provide effective communications from the moment a breach occurs. 

*Appendix B to part 748 – Guidance on Response Programs for Unauthorized Access to Member Information and Member Notice.