Two years after an NCUA letter directed them to do so, many credit unions still aren't in compliance in analyzing their non-maturity deposits or properly modeling interest-rate and liquidity risk.