Cyber & IT Supervisory Forum - November 2023

Internal Use Only

Version 1.1 released in March 2023

The Baseline exam program was updated to address the following:

Streamlined flow of similar questions 1

Combined like questions to increase efficiency 2

Ensure accuracy of citations with the FTC Safeguards Rule 3

Align questions with the FTC Safeguards Rule 4

25

Internal Use Only

Exam Program Goals and Next Steps

Goal is to make this the best and most effective tool possible

Entered the operations and maintenance phase

Maintain the baseline exam program as THE nonbank cyber and IT exam program in the state system

A review of the Enhanced Nonbank Cybersecurity Exam Program is ongoing and will be issued in the coming months

26