CNS is a trusted partner of our credit unions and often we are the first call when there’s a cyber event at an institution. However, there are important limitations to the cybersecurity services that CNS provides. CNS provides general office network design, implementation, and management services. CNS will monitor and patch for supported patches . CNS does not provide cyber security services. CNS does not warrant that managed networks are immune to cyber events or breaches or that lost dat  More...

Yes. You can find a copy of the signed letter of attestation that CU*Answers has completed the annual assessment of the FedLine Solutions Security and Resiliency Assurance Program via our Due Diligence site at cuanswers.com.

To view the entire AuditLink video training library see the link below.

Source of Receipt (SOR) is the paperwork that accompanies the checks to the Check Processor. It is the documented proof of when and from whom the checks were received. SOR provides the ABA# of the bank the checks are received from, the date of the cashletter, the amount of the bundle the check was in, the position of the check in the bundle (checks before after), and the tracer number assigned to the check. On the form you'll see a couple of abbreviations: IB stands for Item Before that   More...

If you are a federally chartered credit union, enter the words “Overdraft fee” in this field to remain in compliance. This is because that description is what is used on the fee summary disclosure on the statement, and federally-chartered credit unions must use this specific terminology. • NOTE: If you are adjusting your description, you may also want to include a statement message to alert members to the change.

Using CBX to Comply with New Rules for Tracking Beneficial Ownership FinCEN has issued new rules under the Bank Secrecy Act that require financial institutions to identify and verify the identity of the beneficial owners of all legal entity members (corporations, etc.). Under the final rule, credit unions are required to have written procedures to identify and verify beneficial owners of legal entity members who open new accounts on or after May 11, 2018. In addition to identifying and collecti  More...

The reports on you would be looking for are the P1099*, P1098* and P5498* reports. These reports are sent to CU*Spy when we send the files to the IRS. They are bundled with the Daily Reports for that day. If the P1099* and P1098* reports are no longer in CU*Spy, you may need to look at your March Reports CD. The P5498* reports should be in CU*SPY or on your May Reports CD. We also send these reports to a credit union's inhouse eDOC server if you have one. The Tax CD you receive contai  More...

No, this is completely separate. With this free eSignatures solutions, all forms must be sent one at a time and are tracked independently as already described. If you have an in-house vault or are interested in a more sophisticated solution for bundles of multiple forms, contact Imaging Solutions and ask about Loan Packages.

Microsoft has thousands of products, and we do our best to help our client-owners maximize their utilization of what Microsoft offers. However, there are important limitations you should understand regarding the service CNS is able to offer related to these products. As a cooperative, we pool owner resources to bulk buy solutions and offer them to you at the lowest prices we can. We do not charge separate management fees for Microsoft products, which keeps your costs for them as low as possible.  More...

Many CNS Complete Care network management clients are securing the services of third-party network security vendors to provide cyber security management and oversight of their networks. CNS strongly recommends that all Complete Care managed clients have a third-party security operations center vendor (sometimes known as a SOC) that specializes in cyber security monitoring and alerting, as the Complete Care management service is not a cyber security management service. CNS can assist your credit   More...

No. Secured loans do not look to joint owners, community property, or marital property laws. The loan documents will not require, ask for, or accept a second signature. Your credit union may wish to review your Member/Loan Documentation to ensure they are still in compliance with the product. You may decide to use a unique certificate type for CD Secured loan products or a unique dividend application for your Share or Share Draft Secured loan products.

AuditLink is a CU*Answers managed services team whose subject matter expertise is the compliance tool kit within the CORE. AuditLink acts as a subject matter expert on your bench to explain how tools within the CORE can be best leveraged to meet compliance and your credit unions risk strategy. AuditLink assists by consulting with credit unions, education, as well as services to help lessen the compliance burden on your internal teams. To learn more about AuditLink and the services they provide p  More...

OFAC is defined in the NACHA Operating Rules and Guidelines Chapter 3, Section 1 pages OG15-OG21. There is a difference between OFAC procedures for ACH transactions and the verification of parties with which a financial institution does business. For ACH purposes, only the addenda information on cross border transactions (IATs) require an OFAC scan for both RDFIs (receiving depository financial institutions) and ODFIs (outgoing depository financial institutions). As far as OFAC compliance goes  More...

More information can be found in Chapter 13 “ODFI Audit Requirements and Rules Compliance” found on OG52 of the NACHA Operating Rules. The first sentence in Chapter 13 states: All ODFIs, Third Party Service Providers performing a function of ACH processing on behalf of those ODFIs, and Third Party Senders must perform an annual audit to determine compliance with all provisions of the NACHA Operating Rules. Third Party Service Providers and Senders are very well defined in t  More...

Simply put, Metro 2 is a new standard electronic data reporting format that is used to report credit data to all of the credit reporting agencies (TransUnion, Equifax, Experian, and CBC/Innovis). Designed to foster the reporting of complete and accurate data to the credit bureaus, the Metro 2 Format also addresses FCRA (Fair Credit Reporting Act) compliance issues. Using a consistent reporting format for all bureaus will make it much more efficient to report data, especially for credit unions   More...

Credit union FROM email addresses are closely regulated and monitored within CU*BASE. As a mass email sender, and as an entity that sends on behalf of the network of credit unions, CU*Answers must meet standards of compliance set forth by email service providers, such as Google and Yahoo. Many of these standards rely on our email being delivered to appropriate and accurate member emails, from correctly configured credit union emails. If we fall out of compliance with these standards, we run the   More...

Direct auditors with questions about OFAC scans to the Using the CU*BASE Data Match System for OFAC Compliance reference booklet, available on the CU*BASE Reference page. Click below to access a direct link to the booklet.

At this time due to compliance reasons business accounts cannot be set up with P2P processing. We are looking at allowing this feature in the future but do not have a ETA at this time.

As of July 1 st , 2025, the Reg CC amounts adjusted for inflation. The new release amount is $275.00. To remain in compliance, CU*Answers updated automated processes; however, there are items to consider that may need to be updated by the credit union. The list below includes items to consider but may not be all encompassing. Funds Availability Policy Websites Member Forms Internal Procedures/Policies Member Notices ( Tool #258 ) Misc. Member Account Forms ( Tool #261 ) CU*Publisher Custom URLs/  More...

Our CU*BASE Member Processing System provides a level of processing competency that surpasses the feature set and functionality of other “traditional” solutions on the market and does so in a more cost-effective manner. Unlike many competitive solutions, CU*BASE is not a “subset” of our flagship product, and all of our clients can take advantage of system enhancements as they are made for no additional charge. The underlying foundation to provide this environment is the I  More...

This ensures compliance with the Credit CARD Act which requires creditors to adopt reasonable procedures designed to ensure that each periodic statement is mailed or delivered to the consumer at least 21 days before the payment due date. Statements are produced on the 1st of the month so they are post marked by the 7th to ensure the 21-day payment due notice.

NACHA requires that same-day items are posted by 5 PM local time the same day they are received. The statement “by 5:00 PM means ‘anytime’ before 5:00 PM. That means 6:00 PM AT, 5:00 PM ET, 4:00 PM CT, 3:00 PM MT, and 2:00 PM PT, all of which are by 5:00 PM local time, are acceptable. NACHA Funds Availability Requirements As of August 2026; refer to https://www.nacha.org/system/files/2021-03/SDA_Schedules_and_Funds_Availability.pdf for the latest requirements. Processing W  More...

No. In the instance of a job screening process, the format for the credit report is significantly different than a credit report used for a lending decision. Your first step is to insure that the job appplicant knows and agrees that the report will be reviewed. You can contact your credit bureau processor (Equifax, Trans Union or Experion) to gain access to their web-based product that will keep you in compliance.

Loan Classification Codes can be used to: Calculate the portion of the principal balance to be reserved as potential losses. Track previously classified loans that have returned to a current status. Track loans that have reserve percentages and the audit year. Track loans that have had documentation problems in the past and might merit auditor/examiner interest in the upcoming audit. Track TCR loans PCILs to assist in completing the 5300 Call Report. You can print a Classification Code report   More...

Because the APY calculator on CU*BASE uses the Minimum Balance configured for that CD Product to perform the calculation. It does not know the member's certificate balance and term. The TIS form calculation is based on the ACTUAL balance of the CD and it annualizes the CD Term. The variance is within compliance tolerance, usually no more than 0.01%.