01
Programme Framework
Threat landscape · 3 lines · governance
02
BEC Threat Map
CEO fraud · vendor invoice · payroll · M&A · attorney
03
Internal Controls
SoD · dual-control · payment-change verification · escalation
04
Vendor Onboarding
Bank-detail verification · callback procedures · ongoing change-protection
05
Detection Rules
Live JS · velocity · amount · counterparty · channel · score
06
Employee Training
Annual + role-based · phishing simulation · scenario tabletop
07
Victim Playbook
Hour-by-hour · reverse / recall · IC3 · bank co-ordination
08
Customer Prevention
Education · transaction-confirmation · authentication discipline
09
Insurance Co-ordination
Cyber + crime policy · claim notification · documentation
10
Recovery Operations
FBI Financial Fraud Kill Chain · receiving-bank engagement
11
Reg E / Liability
Reg E for unauthorised · who pays · reimbursement framework
12
Examination Readiness
SAR linkage · BSA · sponsor-bank flow-through
13
Committee Charter
CFO chair · CCO · CISO · Treasury · cadence · authority