One platform for the control environment credit unions are already running.
CU Risk brings governance, risk, findings, board reporting, and vendor oversight together so teams can work from one source of truth instead of a patchwork of spreadsheets and file shares.
Modules active
5
Connected reporting
Documents linked
186
Evidence in context
Tasks open
23
Owned and tracked
Cross-platform control view
Risk, vendors, findings, and policies aligned
Next actions
Control signal
Core modules
Coverage across the workflows leadership depends on.
Each module is designed to stand on its own while feeding shared reporting, auditability, and operational context across the platform.
Risk Management
CoreRun an institution-wide risk register with ownership, scoring, trends, controls, and mitigation tracking.
- Centralized risk register with inherent and residual scoring
- Control mapping and treatment planning
- Trending views for executives and risk committees
Vendor Management
Third partyOrganize vendor inventories, due diligence, questionnaire workflows, and renewal oversight in a single process.
- Due diligence requests and evidence collection
- Renewal planning and review checkpoints
- Defensible third-party documentation
Policy Governance
GovernanceCoordinate policy lifecycles from drafting and committee review through board approval and version history.
- Version control and approval routing
- Review calendars and accountability
- Connected evidence for auditors and examiners
Findings & Exam Management
AssuranceTrack internal audit findings, examiner requests, remediation tasks, and supporting documents with clear ownership.
- Finding lifecycle tracking with severity and due dates
- Task assignment and status management
- Exam response organization and evidence capture
Board Reporting
ExecutiveDeliver consistent dashboards and narrative summaries that connect operational detail to board-level oversight.
- Board packet metrics and risk summaries
- Leadership-ready issue escalation views
- Repeatable reporting structure for committees and boards
Risk register
Track enterprise risks with context, ownership, and movement over time.
Maintain an organized risk inventory with scoring, owners, mitigation plans, and linked documents so teams can understand what has changed and why.
Policy lifecycle management
Drafting, review, and approval workflow
Drafting
3
Committee
4
Board review
2
Published
48
Acceptable Use Policy
Board review scheduled
Third-Party Risk Policy
Committee approved
Incident Response Standard
Annual refresh
Findings status
High
2
Moderate
8
Low
7
Review cadence
Vendor due diligence
Move vendor reviews forward without losing sight of evidence.
Standardize due diligence requests, responses, approvals, and renewal checkpoints so third-party oversight is easier to defend.
Reviews in flight
14
5 due this month
Evidence gaps
6
2 escalated
Renewals
3
Within 60 days
Review stages
Intake
4 vendors
Evidence collection
6 vendors
Risk assessment
2 vendors
Approval
2 vendors
Due diligence workspace
Checklist status, document gaps, and renewal timing
Core processor
SOC 2 requested
Digital banking
BCP reviewed
Card network partner
High-risk review
Collections tool
Renewal packet
Policy lifecycle management
Keep policy reviews, approvals, and version history under control.
Support drafting, committee review, board approval, and controlled publication with a clear record of what changed and who approved it.
Modules active
5
Connected reporting
Documents linked
186
Evidence in context
Tasks open
23
Owned and tracked
Cross-platform control view
Risk, vendors, findings, and policies aligned
Next actions
Control signal
Findings, audit trails, and evidence
Connect findings management with the records that support closure.
Link issues, tasks, documents, and activity history so teams can demonstrate progress and preserve the context behind each decision.
Audit activity
Access events and workflow changes
Role update
Vendor manager added to due diligence review group
MFA challenge
Successful privileged sign-in for board reporting
Document access
Exam evidence packet retrieved by auditor
Workflow change
Finding severity updated with linked justification
Control checks
Access review
Current
Backup status
Healthy
Audit logs
Retained
Alerting
Foundational capabilities
Shared capabilities that make the entire platform more defensible.
CU Risk is designed to improve consistency across every workflow, not just store records in separate modules.
Board reporting dashboards
Summarize open risks, issues, and trends for leadership review without stitching together separate reports.
Audit trails
Maintain a defensible record of updates, assignments, approvals, and document activity across the platform.
Document repository
Organize governance evidence, vendor records, and supporting files where teams can find them quickly.
Cross-module context
See how policies, vendors, findings, documents, and board reporting relate instead of managing them in isolation.