FCA Cyber Risk Management

Also known as: FCA CRM, Farm Credit Administration cyber risk management, 12 CFR 609

Farm Credit Administration cyber risk management rule (12 CFR 609) — US Farm Credit Administration (FCA)

Obliges every institution of the US Farm Credit System to run a documented cyber risk management programme proportionate to its size and risk, with board oversight and reporting. It is the smallest of the US financial cyber regimes by the number of institutions covered and one of the newest: the final rule was published in December 2023 (2023-27102) after a proposal in July 2022.

Timeline

No changes recorded yet — we are watching, and nothing has been published.

Monitoring

Watched by 1 official source. Watching since 20 September 2026.