OSFI B-13 scenario testing with simulations

iluminr simulations let teams rehearse the decisions OSFI B-13 cares about against severe-but-plausible scenarios, and keep a record of who decided what, and when. Run them as Microsimulations, full-scale simulations, or facilitated by our team of experts.

Simulations mapped to OSFI B-13

Cyber & DataBracing for Impact: Communications TestTest your organization's ability to send timely Emergency Notifications in response to a sophisticated, self-learning malware threat that targets critical infrastructure.Third-Party & TechnologyConnectivity Down: Severe WeatherRespond to severe weather-induced operational disruptions, including widespread internet outages, by verifying role responsibilities and ensuring continuity in communications and operations.Third-Party & TechnologyCore Platform Outage: RollbackA critical platform update turns into a live-fire incident as a scheduled patch unexpectedly brings down key systems. Participants must navigate real-time service degradation, mounting customer pressure, and rollback decisions under duress. This Microsimulation tests cross-functional coordination, incident escalation, and communication flow - providing vital validation of operational resilience, rollback protocols, and regulatory compliance readiness.Cyber & DataData Breach: Major LeakA massive data breach has struck some of the world’s largest organizations, including your own, leading to the potential compromise of sensitive personal information. The breach has exposed the names, phone numbers, and addresses of millions of customers, raising immediate concerns about privacy, identity theft, and the security of your data handling practices.Third-Party & TechnologyExit Plan: Vendor InsolvencyA critical third-party vendor has filed for insolvency, causing both operational and data losses. Can your team execute the exit plan under pressure?Cyber & DataExtortion: Ransomware InvasionAddress a widespread ransomware attack demanding cryptocurrency payments, focusing on stakeholder communication and restoring operational control.Cyber & DataInside Job: Data BreachNavigate the high-stakes initial response to a sophisticated insider threat that has compromised sensitive organizational data, testing your incident response protocols when the threat comes from within.Third-Party & TechnologyRipple Effect: Fourth-Party FalloutA critical system failure has occurred in your supply chain, creating significant operational impacts. Your third-party vendor experienced a service outage caused by a vulnerability introduced through an undetected AI-driven update in their supplier's systems. This failure has cascaded through your supplier's network, resulting in widespread service disruptions that are now affecting your business operations and customers.Cyber & DataTrading Halt: Ransomware ChaosAddress a major ransomware attack causing a service outage, suspected to be state-sponsored, by coordinating with cybersecurity experts and effectively communicating with stakeholders.Third-Party & TechnologyTrapped: Vendor Modern SlaveryNavigate the ethical, legal, and operational challenges posed by a tech supplier embroiled in a modern slavery scandal, focusing on incident assessment and communication strategies.Third-Party & TechnologyVendor Outage: System DownRespond to a critical vendor cyber-attack that has disrupted essential services, focusing on business impact assessment, data review, and immediate contingency actions.Cyber & DataDouble Tap: Cyber AttackA major information services provider faces a cyber crisis, leading to system outages, regulatory scrutiny, and eroded client trust. Participants will manage rapid response adjustments, client communication, and rebuilding credibility under intense pressure.Cyber & DataEvolved: Adaptive MalwareA sophisticated form of malware has caused disruption across global health services, telecommunication and technology providers.Cyber & DataVished: Customer & Regulatory ImpactsA convincing voice-phishing call gives attackers a foothold, with consequences for customers and regulators. Assess the incident, identify the critical business functions at risk, and work through your regulatory obligations.Cyber & DataWage Gap: Data Breach FalloutAddress the aftermath of a data breach revealing pay inequity, focusing on stakeholder engagement, implementing corrective measures, and restoring organizational trust.Cyber & DataPlan Under Pressure: Cyber IncidentA confirmed disruption is unfolding. You're drawn into the early response and asked whether a formal plan should be activated.Cyber & DataAccount Takeover: Containment & ResponseA suspected account compromise points to a data breach. Contain it, escalate it and coordinate across functions.

Mapping is indicative. Confirm scope against your own obligations.

Frequently asked questions

More in Canada