Cyber IT Supervisory Forum eBook

Internal Use Only

HOW – Implementation Options • Target Exam (onsite) w/ a focus on Volt Typhoon embedded in InTREx (could be called onsite monitoring).

• Offsite Exam (offsite monitoring) • Phone calls or

• MS Forms w/ VT questions for banker to respond to • Something similar w/ SolarWinds or Log4J reviews

• Combo (b + a) – Turn VT questions into a survey/ questionnaire and follow up later.

• Other -- implementation options ???

HOW