Cyber & IT Supervisory Forum - November 2023

Internal Use Only

Exercise Instructions

For each Inject, your table will discuss the questions from the perspective of the company.

Focus on how you would respond if this happened, and not whether this could happen.

Assumptions are needed to complete the exercise. Do not let the lack of information negatively impact your participation.

There will be a group discussion after each inject and the state regulator exam.

5

Internal Use Only

Scenario Briefing

6