1. Bank regulators have announced that cyber-security is not a risk that they will regulate at the bank or bank holding company level. It will be up to individual banks and customers will have to assess which banks are doing a better job protecting their accounts.

True or False

2. The management of Dime Community Bancshares does not recognize the risk of lapses or breaches in cyber-security in its 10-K. This is likely because they do not want to draw attention to their weaknesses in operational risk management.

True orFalse

3. Mobile phishing is a means for identity thieves to obtain sensitive personal information through fraudulent e-mail, text or voice mail.

True or False

4. Because the management of DCOM recognizes that managing cyber risk may require significant financial investments they have decided to postpone investments and take their chances. They discuss the fact that the risk will be absorbed by the FDIC.

True or False