Practice before the request.

Inside the actual kit

Run a short team rehearsal.

1. Prepare: choose a facilitator and use fictional details. Keep real credentials, account numbers and customer records out.
2. Read: a familiar-looking vendor message supplies new payment instructions and a new callback number. It says the usual approver is unavailable.
3. Discuss: what changed? Which previously approved contact verifies it? Who can approve? Where is the decision recorded? Who handles an unresolved request?
4. Check: use the answer guide below. Record unknowns without guessing.
5. Assign: give each gap an owner, evidence request and review date.

Allow about 15 minutes. For a 20-minute hosted session, leave the final five minutes for questions and selecting one follow-up. This is a discussion exercise, not a live security test.

Compare with the answer guide.

The expected process is to pause the sensitive change, use a trusted contact already in approved records, confirm the specific request, follow the agency’s established approval process and retain the decision through its approved recordkeeping procedure. The new callback number cannot independently verify the message that supplied it.

If the trusted route or backup approver cannot be found, escalate through the established process. “Unknown” is an exercise finding, not proof of a compromise. Staff do not need to identify an AI model before verifying a request.

Leave with four useful records.

• Callback card: a reminder to verify changed instructions through an existing trusted route.
• Payment-change worksheet: request, verification, approval, record and escalation.
• Recovery-contact worksheet: provider contact, separate contact route, owner, backup and approved offline procedure location.
• Provider questions: dated evidence for email controls, access, recovery and website updates.

The downloadable kit includes blank fields and a separate worked answer guide. Save completed worksheets only in an agency-approved location. Use the private, memory-only action-plan builder if you prefer a text export.

Bring it to your audience.

Agency networks, trainers and IT providers may share the original Cirlet kit at no charge, including in commercial training, with attribution and a link to this page. You may adapt the original exercise text; label your changes and retain its fictional-example and safety limits. Do not imply Cirlet reviewed an adaptation or that any agency, CISA or other source endorses it. Third-party sources and fonts keep their own rights. Do not sell the unchanged kit as a standalone product.

Suggested attribution: “Agency AI Attack Readiness Kit, by Cirlet. Free resources at aicybersecurityforinsuranceagencies.com/readiness-kit.” Download a ready-to-use newsletter introduction.

Want to discuss using it in a publication or partner session? Contact Cirlet. No speaker availability or partnership is implied by downloading.

Source and next step

The verification principle is informed by the FBI’s May 15, 2025 impersonation advisory. The worksheet and fictional rehearsal are Cirlet’s own. Read the sourced playbook and our checking and corrections standard.

Need hands-on help reviewing agreed evidence? See what Cirlet’s $750 Sprint includes. The free kit is useful on its own; it does not certify controls or provide emergency response.