Baseline Nonbank Cybersecurity Exam Program

Question 33

Is there a communication plan in place for contacting employees, vendors, regulators, municipal authorities, emergency response personnel (as needed)?

13

Question 34

Is there a plan in place for notifying customers? Does the notification plan follow all appropriate state (and/or federal and international, if applicable) regulations and/or requirements?

14