Securing Network Assets & Vulnerabilities: A Quick Guide for Banks and Credit Unions
 |
|
Banks and credit unions must maintain strong cybersecurity practices to protect customer data and meet regulatory requirements. |
Two critical areas are:
-
Network Asset Visibility: Know every device, application, and system connected to your network.
-
Vulnerability Management: Identify and remediate weaknesses before attackers exploit them.
Why It Matters
- Unpatched systems and misconfigured devices are top attack vectors.
- Cyber incidents may lead to financial loss and reputational damage.
Compliance Checklist
✔ Maintain a current inventory of all assets attached to your network.
✔ Conduct regular vulnerability scans and document findings.
✔ Verify that 100% of your assets are being scanned and that they are included in the vulnerability scan report.
✔ Implement a patch management program with prioritization for critical updates.
Bottom Line: Visibility and proactive vulnerability management are essential to reduce cybersecurity risk and protect sensitive data. Start with the Compliance Checklist to strengthen your security posture.
Questions? Contact Keith Steinberg, NDDFI IT Examiner
Is Your Business Compliant with the Revised Uniform Unclaimed Property Act (RUUPA)?
North Dakota Century Code Ch. 47-30.2 requires businesses to reunite abandoned property with its rightful owner and prevent misuse by holders.
What Does This Mean for You?
- Review your records annually for unclaimed funds, securities, or property.
- Report and remit unclaimed property to the State after the required abandonment period (varies by property type).
- All businesses and nonprofits must comply—no exceptions.
Need Help?
- Visit https://unclaimedproperty.nd.gov/ for the holder reporting manual.
- Call the Unclaimed Property Division at (701) 328-2800, option 2.
Could You Have Unclaimed Property? Search for your business at https://unclaimedproperty.nd.gov/.
|
Order of Denial of Application for Organization Certificate – Trust Company of the Dakotas
The Commissioner of the North Dakota Department of Financial Institutions, acting on behalf of the State Banking Board, has issued an Order of Denial regarding the Application for an Organization Certificate for Trust Company of the Dakotas, Minot, North Dakota.
Under North Dakota Century Code Chapter 6-05, the formation of a trust company requires Board approval based on factors including public need, business competency, and the character and integrity of proposed incorporators.
After a hearing and review of testimony, exhibits, and public comments, the Board concluded that the Applicants failed to meet the requirements for a trust charter.
Accordingly, the Application for Organization Certificate for Trust Company of the Dakotas is denied. The proposed incorporators are not authorized to transact business as a trust company in the State of North Dakota.
More information is contained in the Findings of Fact, Conclusions of Law, and Order of Denial of Application.
Community Bank Sentiment Index (CBSI)
The 4th quarter CSBS CBSI is near its all time high, signaling a continued positive outlook by community bankers.
  Expectations regarding regulatory burden has seen the most improvement in 2025 after 15 consecutive quarters below 30 where the expectation was a heavier regulatory burden.
 More details on the CBSI results are found on the CBSI website.
State-Chartered Bank Activity
State-Chartered Credit Union Activity
Monthly Bulletin
The Department issues a monthly bulletin which details applications received and their status, including any action by the State Banking Board or the State Credit Union Board. The monthly bulletin is an effort to keep North Dakota citizens and other interested parties apprised of actions and activities conducted by our state-chartered financial institutions. They are located on our website at https://www.nd.gov/dfi/news-and-publications/department-bulletins.
|
Virtual Currency Kiosks – What Licensee’s should know.
 Virtual currency kiosk operators are regulated as money transmitters under North Dakota law, specifically North Dakota Century Code (NDCC) Ch. 13-09.1. A virtual currency kiosk operator includes entities whose services facilitate the exchange of virtual currency for money, bank credit, or other virtual currency when the transaction process relies on use of the kiosk. North Dakota passed new legislation in 2025 that created additional operating and fraud prevention requirements for virtual currency kiosk operators.
One new provision resulting from the passage of House Bill 1447 requires licensees to provide the location of all the kiosks using your software located in the state of ND on a quarterly basis. The Department requests that licensees provide kiosk location information through the authorized delegate function of the NMLS system.
The Department anticipates posting Frequently Asked Questions relating to virtual currency kiosk regulation for industry and consumers on its website in February 2026.
Kruse and Mihorn to Speak at NDBA 2026 Management Conference
Commissioner Kruse along with CSBS President/CEO Brandon Milhorn will participate in a fireside chat at the NDBA 2026 Management Conference Feb. 13-14.
2026 NMLS Annual Conference Feb. 17-20
 |
|
Department staff will be at the NMLS conference Feb. 17-20, and will participate in the “Meet Your Regulator” event.
|
|