Cyber & IT Supervisory Forum - November 2023

Internal Use Only

Inherent Risk Ratings Identifying reasonably foreseeable risks

Continuity

External Technical Breach

Physical Theft Internal Technical Breach Data Integrity Data Theft

Regulatory Compliance Financial Reporting

Reputation

Strategic

11

11

Internal Use Only

Inherent Risk Key Concepts Mapped to assets vs. entity ‐ wide

Quantitative vs. qualitative

12

12