True, false, or true but mislabelled?
Five claims about AI and credit union rules that sound real. The skill is knowing what kind of authority each one carries: a binding rule, supervisory guidance, a contract, or a benchmark.
Pick a verdict for each claim. Once you pick, it's final.
Claim 1: “NCUA has no AI rule, so AI tools are outside the Part 748 security program our president certifies.”
Claim 2: “NCUA’s AI FAQ says examiners evaluate third-party due diligence when credit unions use AI vendors.”
Claim 3: “Part 748 Appendix B requires us to notify members of every security incident.”
Claim 4: “SR 26-2 replaced SR 11-7 and now binds credit unions’ model risk management.”
Claim 5: “A Freddie Mac seller/servicer using AI in originations must have written AI/ML policies approved by senior management.”
Claim set from the program's session drills. Source-check date 28 September 2026. Not legal advice. Your answers stay in your browser.
Every session of the AI Oversight Program opens this way.
Boards, compliance, security, vendor management, IT and audit learn to label what binds them, and build the evidence to show it.