- This Abrigo article was originally published October 2, 2026 on CUInsight.
2027 credit union strategic planning starts with a risk conversation
October 6, 2026
0 min read
Aligning plans with the NCUA's priorities
Instead of starting with a loan-growth target, membership goal, or new market idea, credit union leaders can begin with a reflective question: What did 2026 reveal about our credit union’s risks, resources, and capacity?
A careful look at 2026 can help leaders incorporate aspects of NCUA’s new 2026–2030 Strategic Plan, which emphasizes risk-focused supervision, responsible innovation, data and analytics, and workforce capabilities. Credit union leaders can take the NCUA’s guidance as a cue to examine the evidence first, determine where growth is supportable, establish the guardrails, and then define the goals.
This article covers these key topics:
Start with the evidence, not the growth target
Before debating what the credit union should accomplish in 2027, assemble a report that considers:
- Commercial, small business, and consumer lending performance
- Delinquencies, charge offs, credit quality, and portfolio concentrations
- ACL levels, methodologies, and assumptions
- Liquidity, funding, interest-rate sensitivity, and capital
- Fraud activity and emerging payment risks
- AML/CFT trends and staffing capacity
- Internal audit findings and unresolved issues
- Examination recommendations and management responses
- Data limitations that make risk or performance harder to understand
You might also like this small business loan monitoring checklist for credit unions.
Download nowUse NCUA priorities as a planning reference
NCUA’s Examiner’s Guide specifically directs examiners to consider whether risk appetite and risk tolerances are consistent with strategic plans and the credit union’s financial condition. It further asks whether those tolerances are translated into usable risk limits and whether data systems provide reliable information for policymaking and strategy. Leadership teams can use NCUA’s priorities as a lens for asking whether their own plans are appropriately balanced. For example:
- Where are we taking risks?
- How are we measuring risk?
- What controls and resources support risk management?
- What would cause us to change course?
Those questions fit naturally into credit union strategic planning because they connect growth ambitions with the institution’s actual capacity to absorb risk.
Decide where growth is supportable
NCUA’s 2026 priorities note that loan performance has weakened, with delinquency and rolling 12-month loss rates in federally insured credit union portfolios at their highest levels in more than a decade. The agency also cites asset quality, elevated funding costs, and balance-sheet stress as important considerations. With these factors in mind, leadership should ask deeper questions than, “How much can we grow?” and drill down into each segment of the portfolio for insights.
A 2027 plan might call for expansion in one lending segment, maintaining another, and deliberately slowing growth in a third. This can be a stronger strategy than applying a single growth percentage goal across the entire balance sheet. Consider commercial, small business, and consumer lending as separate yet connected. Growth in one area can affect concentration, liquidity, capital, staffing, and operational capacity elsewhere. Try to determine, “How much growth can we prudently support, and where does that growth make the most sense?”
NCUA’s Examiner’s Guide similarly says policies, procedures, and resources—including employees, capital, technology, marketing, and member relations—must support the objectives in the business plan. A growth discussion should therefore include the infrastructure behind growth: underwriting resources, portfolio monitoring, experienced personnel, capital, liquidity, and systems.
Put risk guardrails next to the goals
NCUA guidance says examiners will review how institutions incorporate interest-rate and liquidity risks into governance, contingency funding plans, and strategic decision-making. This focus will make alignment with risk appetite essential for credit unions.
A strategic goal without a corresponding risk limit can be difficult to manage. For every major 2027 priority, consider defining the guardrails before the final target is approved. Depending on the institution, that might include:
- Concentration limits
- Credit-quality thresholds
- ACL assumptions and sensitivity
- Interest-rate and liquidity measures
- Capital expectations
- Staffing or operational-capacity thresholds
- Trigger points for management escalation
Make financial crime prevention part of the strategy
Fraud and AML/CFT should not be relegated to separate operational conversations while the strategic plan focuses solely on growth. A new product, digital channel, member segment, or market can change the institution’s financial crime risk profile. Strategic planning should therefore address whether the credit union has the people, controls, monitoring, and data needed to support those changes.
NCUA’s 2026 priorities specifically call for continued attention to payment-system governance, risk assessments, vendor management and security frameworks, as well as fraud prevention and detection. The agency also says examiners will evaluate whether AML/CFT programs are risk-based and tailored to the credit union’s specific risk profile.
Staffing belongs in this discussion, too. AML staffing experts emphasize evaluating staffing needs based on an institution’s size, risk profile, and workload rather than relying on a one-size-fits-all model. To start the discussion, ask: What new risks will our 2027 priorities create, and what resources will be required to manage them?
Make data and generative AI practical
The 2027 planning cycle will inevitably include conversations about artificial intelligence. Those conversations will be more useful when they start with a business problem rather than a technology trend.
NCUA’s new strategic plan explicitly identifies data, analytics, and artificial intelligence as tools for stronger risk identification, analysis, and decision-making. It also emphasizes data governance and data quality. Credit unions can apply that thinking to specific decisions:
- Could better data improve portfolio risk monitoring?
- Could automation reduce manual work in lending workflows?
- Could generative AI help organize board reporting or investigative information?
- Could better analytics identify emerging fraud patterns sooner?
Adding AI to the strategic plan to stay on top of a trend is a recipe for wasted resources. Instead, identify where better data, intelligence, or automation could produce a measurable improvement—and then address governance, data quality, human oversight, and accountability.
Make the plan examiner- and auditor-ready
A strong plan should also withstand the questions that come after board approval: Who owns each strategic priority? How will progress be measured? How often will the board see the results? What risk limit applies? What happens when performance moves outside the expected range? Which 2026 audit or examination findings must be resolved to support the strategy?
NCUA’s Examiner’s Guide says examiners review strategic and business plans to assess the integration of risk management into planning and decision-making. It also directs them to review responsiveness to examination and audit recommendations and corrective actions. The guide further states that the business plan should contain measurable objectives, clearly defined acceptable risk levels, sufficient capital to support risk-taking, and consistency among the budget, policies, procedures, and resources.
For each strategic priority, consider documenting the following:
- Owner: Who is accountable for execution?
- Indicator: What will tell the board whether the strategy is working?
- Risk limit: What level of risk is acceptable?
- Reporting cadence: When will leadership and the board review progress?
- First 90 days: What must happen immediately after the plan is approved?
5 Questions to test the 2027 plan
As boards and management teams move toward final approval, five questions can help determine whether the strategy is grounded in evidence:
- Where will we grow?
- What risks could limit that growth?
- What data will tell us whether the strategy is working?
- Who owns execution?
- What must happen in the first 90 days?
Win more small business deals and grow market share.
Explore Abrigo Small Business LendingFAQs
How can credit unions use NCUA guidance in 2027 strategic planning?
Use NCUA priorities as a reference for evaluating whether the plan aligns with the credit union’s financial condition, risk appetite, and capacity. The article recommends checking that risk tolerances translate into usable limits and that reliable data supports policy and strategic decisions
What should a credit union review before setting its 2027 goals?
Review lending performance, credit quality, portfolio concentrations, allowance for credit losses (ACL), liquidity, capital, fraud and AML/CFT trends, staffing capacity, audit findings, examination recommendations, and data limitations. These findings can show where the credit union may need to adjust its plans.
How can a credit union connect growth goals to risk management?
Set risk limits alongside major goals. Depending on the priority, guardrails could include concentration limits, credit-quality thresholds, liquidity measures, capital expectations, staffing capacity, and management escalation triggers. These give leaders a basis for deciding whether to accelerate, maintain, or pause an initiative.
How should credit unions evaluate AI and automation during strategic planning?
Start with a business problem, such as improving portfolio monitoring, reducing manual lending work, organizing board reporting, or identifying fraud patterns. Then assess whether the credit union has the data quality, governance, human oversight, and accountability needed to use the technology responsibly.
This blog was updated with the assistance of an AI large language model. It was reviewed and revised by an Abrigo subject-matter expert.
The information, content and materials provided through this website are for informational purposes only and are not intended to constitute legal advice. Customers should consult with their legal counsel regarding the application of laws and regulations to their specific circumstances.
About the Author
Kate Randazzo
Senior Content Marketing Manager
Abrigo
Kate Randazzo is a Senior Content Marketing Manager at Abrigo, where she collaborates with industry thought leaders to develop digital content for banks and credit unions. Drawing on her background in strategic communications and content marketing, she translates complex financial topics into practical insights that help financial institutions better serve
