Baseline Nonbank Cybersecurity Exam Program

Question 35

Is the Incident Response Plan reviewed, tested, and updated at least annually?

15

Question 36

When was the last time an incident occurred? How did the institution handle it? Are all incidents mitigated?

16