Cyber and Technology Risk Management Forum, Park City, UT

• The OCC called for the creation of the CCIWG, • OCC led develop of the CAT • The FDIC lead revamping of IT exam procedures • The federal agencies lead FFIEC IT Examination Handbooks, • The FRB Chicago operated a Technology training. • The Federal agencies have formal IT training programs. (For both commercial and IT SME, and IT Specialists) • Most states have IT generalists or no one trained for IT risks. But, there are exceptions.

• As threats accelerate, bank’s protective measures must change faster • Adversaries may attack a dozen smaller banks than attempt breaching a mega-bank. • Potential media coverage of a dozen community banks could have devastating impact on community banking. • A loss of confidence in community banks could result in large shift to mega-banks.