Credit Union Board Governance Audit Checklist [FREE PDF]

The National Credit Union Administration (NCUA) holds credit union boards of directors personally accountable for ensuring the institution operates in a safe, sound, and compliant manner under 12 CFR Part 701 and NCUA Rules and Regulations. Boards must demonstrate active oversight of strategic risk, compliance, and financial performance rather than passive ratification of management decisions. This checklist enables internal auditors and supervisory committee members to systematically evaluate b

  • Industry: Credit Unions
  • Frequency: Annually
  • Estimated Time: 60-90 minutes
  • Role: Internal Auditor
  • Total Items: 36
  • Compliance: NCUA Rules and Regulations 12 CFR Part 701, BSA/AML - 31 CFR Part 1020 (FinCEN CDD Rule), FFIEC IT Examination Handbook - Management Booklet, GLBA 15 U.S.C. § 6801 Safeguards Rule 16 CFR Part 314, Dodd-Frank Act Section 1071 Small Business Lending Data

Board Composition & Structure

Assess whether the board of directors meets NCUA requirements for composition, eligibility, and structural governance elements.

  • Does the board consist of an odd number of directors (minimum 5) as required by the credit union's charter and NCUA regulations?
  • Have all directors been elected by the membership or appointed to fill vacancies in compliance with the credit union's bylaws?
  • Has the board established required standing committees including a supervisory committee, audit committee, or equivalent?
  • Does the board include members with sufficient financial literacy to oversee the credit union's financial condition?
  • Are director conflict-of-interest disclosure policies in place and signed disclosures current for all board members?

Board Meeting Governance & Minutes

Evaluate the quality, frequency, and documentation of board meetings as indicators of active governance versus passive oversight.

  • Has the board met at least monthly as required by NCUA regulations and the credit union's bylaws?
  • Do board meeting minutes accurately reflect substantive discussions, votes, and dissenting opinions on key decisions?
  • Are board meeting minutes approved at the subsequent meeting and maintained in a secure, permanent record?
  • Does the board receive and review comprehensive management reports covering financial performance, delinquency, and compliance at each meeting?
  • What is the average board meeting attendance rate for the audit period?

Strategic Planning & Risk Oversight

Determine whether the board exercises meaningful oversight of strategic planning, risk appetite, and enterprise risk management.

  • Has the board approved a written strategic plan covering at least a 3-year horizon within the past 12 months?
  • Has the board formally adopted a risk appetite statement that defines acceptable risk thresholds?
  • Does the board receive and review quarterly financial reports including capital adequacy, liquidity, and net worth ratio trends?
  • Has the board approved a written investment policy and reviewed investment portfolio compliance within the past 12 months?
  • Are interest rate risk management policies reviewed and approved by the board at least annually?

BSA/AML Board Oversight & Responsibilities

Confirm that the board fulfills its mandatory BSA/AML oversight responsibilities including program approval, training, and independent audit review.

  • Has the board formally approved the BSA/AML compliance program within the past 12 months?
  • Have all board members completed BSA/AML training appropriate for their governance role?
  • Has the board reviewed and accepted the most recent independent BSA/AML audit report?
  • Is the BSA Officer a qualified individual who reports BSA program status directly to the board?
  • Has the board been briefed on current BSA/AML risks and typologies relevant to the credit union's membership and products?

Compliance Program & GLBA Oversight

Assess board oversight of the overall compliance management system and GLBA privacy and safeguards obligations.

  • Has the board designated a Chief Compliance Officer or equivalent with adequate resources and authority?
  • Does the board receive regular compliance risk reports covering regulatory changes, examination findings, and complaint trends?
  • Has the board approved and reviewed the GLBA-required information security program within the past 12 months?
  • Has the board reviewed the annual privacy notice process and confirmed GLBA Regulation P compliance?
  • Are regulatory examination findings tracked to resolution with board visibility into outstanding corrective actions?
  • Has the board reviewed the institution's compliance with Dodd-Frank Section 1071 small business lending data requirements?

Supervisory Committee & Internal Audit Effectiveness

Evaluate whether the supervisory committee fulfills its NCUA-mandated audit and verification responsibilities independently from management.

  • Has the supervisory committee completed a verification of members' accounts (passbook verification) within the past 24 months?
  • Has an internal or external audit been conducted and the report presented to the full board within the past 12 months?
  • Is the supervisory committee operationally independent from management and the CEO in its audit and oversight activities?
  • Have all material supervisory committee findings been reported to the board with documented management responses and remediation timelines?
  • Does the supervisory committee have a documented annual audit plan covering key risk areas?

Executive Compensation & CEO Oversight

Verify that the board exercises appropriate oversight of executive compensation, CEO performance, and succession planning as required by NCUA standards.

  • Has the board conducted a formal annual CEO performance evaluation using documented criteria?
  • Is executive compensation reviewed and approved by the full board or a designated compensation committee annually?
  • Does the credit union have a documented CEO succession plan reviewed and approved by the board?
  • Are all executive compensation arrangements in compliance with NCUA 12 CFR § 750 golden parachute restrictions?
  • Please provide additional governance observations or notable board effectiveness findings from the audit period.

Related Financial Services Banking Checklists

Related Compliance Audit Checklists

Why Use This Credit Union Board Governance Audit Checklist [FREE PDF]?

This credit union board governance audit checklist [free pdf] helps credit unions teams maintain compliance and operational excellence. Designed for internal auditor professionals, this checklist covers 36 critical inspection points across 7 sections. Recommended frequency: annually.

Ensures compliance with NCUA Rules and Regulations 12 CFR Part 701, BSA/AML - 31 CFR Part 1020 (FinCEN CDD Rule), FFIEC IT Examination Handbook - Management Booklet, GLBA 15 U.S.C. § 6801 Safeguards Rule 16 CFR Part 314, Dodd-Frank Act Section 1071 Small Business Lending Data. Regulatory-aligned for audit readiness and inspection documentation.

Frequently Asked Questions

What does the Credit Union Board Governance Audit Checklist [FREE PDF] cover?

This checklist covers 36 inspection items across 7 sections: Board Composition & Structure, Board Meeting Governance & Minutes, Strategic Planning & Risk Oversight, BSA/AML Board Oversight & Responsibilities, Compliance Program & GLBA Oversight, Supervisory Committee & Internal Audit Effectiveness, Executive Compensation & CEO Oversight. It is designed for credit unions operations and compliance.

How often should this checklist be completed?

This checklist should be completed annually. Each completion takes approximately 60-90 minutes.

Who should use this Credit Union Board Governance Audit Checklist [FREE PDF]?

This checklist is designed for Internal Auditor professionals in the credit unions industry. It can be used for self-assessments, team audits, and regulatory compliance documentation.

Can I download this checklist as a PDF?

Yes, this checklist is available as a free PDF download. You can also use it digitally in the POPProbe mobile app for real-time data capture, photo documentation, and automatic reporting.

Browse More Checklists