This Appendix describes the scope and features of the MANAGED NCUA services offered by Intech Hawaii. This Appendix is incorporated by reference into the Services Guide and is subject to all terms and conditions of the Services Guide and the Master Services Agreement ("MSA"). Only the specific services listed in your Quote will be provided; all other services described in this Appendix are available but not included unless expressly added to your Quote. Intech Hawaii reserves the right to update this Appendix from time to time to reflect changes in available services; material changes that negatively impact services already included in your Quote will be communicated to you by email.
MANAGED NCUA
Tailored for credit unions, this service supports adherence to National Credit Union Administration (NCUA) regulations. NCUA IT security audits must be performed by a qualified third-party provider. Intech Hawaii coordinates with and supports your chosen audit provider but does not perform NCUA IT security audits directly.
Risk Assessment and Gap Analysis
We assist with an initial compliance review to identify risks and gaps against NCUA requirements, and develop an action plan for remediation. (Remediation projects, such as encryption or system upgrades, are billed separately.)
Policy Development and Review
We develop and maintain NCUA-compliant policies and procedures covering cybersecurity, data protection, and operational standards, updated as NCUA requirements or your environment change.
Cybersecurity and Data Protection
We support evaluation of your cybersecurity posture and implementation of protections to meet NCUA standards, including member data privacy safeguards.
Incident Response and Breach Notification
We develop a tailored Incident Response Plan and support NCUA-compliant breach notification processes. (Incident response and remediation services are billed separately — see Breach/Cybersecurity Incident Recovery section.)
Compliance Documentation and Record Keeping
We assist with maintaining compliance records and documentation per NCUA retention requirements, ensuring audit readiness at all times.
NCUA Examination Support
We assist in preparing for NCUA examinations, coordinating with your third-party audit provider, and supporting responses to examiner requests and findings.
Client Responsibility and Attestation
Client is solely responsible for achieving and maintaining its own compliance with National Credit Union Administration (NCUA) regulations. Intech Hawaii's role is limited to IT-related support, documentation guidance, and coordination with Client's designated third-party NCUA IT security audit provider as described in this Appendix. Client acknowledges and agrees that Intech Hawaii's provision of Managed NCUA services does not constitute regulatory compliance or examination readiness, and does not relieve Client of any obligation under NCUA rules or applicable federal and state regulations. Client represents that it will independently satisfy, attest to, and maintain all NCUA requirements applicable to its operations. Intech Hawaii shall have no liability for Client's failure to achieve or maintain NCUA compliance or pass any regulatory examination.
Last Updated: April 7, 2026