Cyber & IT Supervisory Forum - November 2023

Internal Use Only

Exercise Schedule

Activity

Time

Breakout Session 1

Introduction

1:30 –1:35 pm 1:35 –1:40 pm 1:40 –2:00 pm 2:00 –2:30 pm 2:30 –2:45 pm 2:45 –2:50 pm 2:50 –3:00 pm 3:00 –3:15 pm 3:15 –3:35 pm 3:35 –3:45 pm

Scenario Briefing

Inject 1 Inject 2

Break

‐

Breakout Session 2

Introduction

Inject 3 Inject 4

State Exam

Q & A

3

Internal Use Only

Exercise Objectives

Regulators will learn about the various aspects of the incident response program during the tabletop exercise, with a focus on both the company’s and examiner’s perspectives. Regulators will gain familiarity with the nonbank exam programs and the associated reference guide, specifically related to business continuity and incident response.

4