Audit of AMAC’s Internal Controls over Personally Identifiable Information In Liquidated Credit Union Records

The National Credit Union Administration (NCUA) Office of Inspector General conducted this self-initiated audit to assess the NCUA’s Asset Management and Assistance Center’s (AMAC) ability to protect personally identifiable information (PII) found within the records of liquidated unions. The objectives of our audit were to determine whether: 1) AMAC management’s control activities over the liquidation process adequately considers and safeguards PII from initial identification to destruction; and 2) AMAC’s liquidation activities comply with applicable policies, procedures, laws, and regulations relating to the protection of PII.