Skip to main content
Annual Tabletop
Menu
Business Email Compromise / Wire Fraudintermediate~75 min

FFIEC Wire Fraud — The Examiner's Favorite FI Tabletop

A community bank's wire room authorizes a $2.3M outbound after a spoofed CEO thread. Walk the FFIEC IT Handbook IR sequence, hit the NYDFS 72-hour clock, and produce the evidence packet your examiner asks for.

Learning objectives

  • Walk the FFIEC IT Handbook Information Security Booklet IR chain end-to-end.
  • Execute the NYDFS 23 NYCRR §500.17 72-hour reporting decision.
  • Produce a documented IR exercise artifact that maps to the FFIEC CAT and NCUA ACET maturity scoring.
  • Coordinate FinCEN SAR filing and Reg E / wire recall paths under time pressure.

Scenario brief

## Scenario context

Anchor scenario for community banks, credit unions, and FinTechs. Built around
the documented IR exercise evidence that FFIEC, NCUA, and NYDFS examiners
actually look for — and the dual-clock pressure of a SAR window and a 72-hour
NYDFS notification.

Bring this scenario to your next exercise.