cirlet · 1/5

Practice before the request.

Agency AI Attack Readiness Kit

Use fictional details. No client records, real transfers or live account changes.

cirlet · 2/5

A familiar message asks for a change.

New payment instructions. A new callback number. The usual approver is unavailable.

Fictional exercise: what would your team do next?

cirlet · 3/5

Five decisions need an owner.

Request. Trusted verification route. Approval. Record. Escalation.

Use the contact already in approved records. A new number cannot independently verify the message that supplied it.

cirlet · 4/5

An unknown answer needs a follow-up.

Name the missing evidence, its owner and a review date.

Discussion is not technical control testing. Finding a contact record does not prove an account is secure.

cirlet · 5/5

Leave with one assigned action.

What will you clarify before the next sensitive request?

Free worksheet and separate answer guide: aicybersecurityforinsuranceagencies.com/readiness-kit