National Credit Union Administration

The National Credit Union Administration (NCUA) Office of Inspector General (OIG) conducted this self-initiated audit to assess the NCUA’s Enterprise Risk Management Risk Profiles. The objective of our audit was to determine if the NCUA adequately established, maintained, and used risk profiles to...

National Credit Union Administration (NCUA) Office of Inspector General (OIG) Semiannual Report to the NCUA Board and the Congress highlighting our accomplishments and ongoing work for the 6-month period ending March 31, 2026.

This letter to Congress reports on NCUA OIG's assessment of the NCUA's 2025 compliance under the Payment Integrity Information Act of 2019 (PIIA).

KPMG LLP’s (KPMG) report on its financial statement audit of the National Credit Union Administration’s (NCUA) financial statements, which includes the Share Insurance Fund, the Operating Fund, the Central Liquidity Facility, and the Community Development Revolving Loan Fund, as of and for the year...

National Credit Union Administration (NCUA) Office of Inspector General (OIG) Semiannual Report to the NCUA Board and the Congress highlighting our accomplishments and ongoing work for the 6-month period ending September 30, 2025.

Under a contract monitored by the OIG, KPMG, an independent certified public accounting firm, performed an audit of the NCUA’s schedule of accounts receivable, net (other than intragovernmental) and other taxes and receipts as of and for the period ended September 30, 2025. KPMG conducted the audit...

This report summarizes the results of Sikich’s independent evaluation and contains ten new recommendations that will assist the agency in improving the effectiveness of its information security and its privacy programs and practices. NCUA management concurred with and has identified corrective...

The National Credit Union Administration (NCUA) Office of Inspector General (OIG) conducted this self-initiated audit to assess how effectively the NCUA shared cyber threat information. Our objectives were to determine whether the NCUA: 1) effectively used shared cyber threat information for the...