IIBF Cyber Crimes & Fraud study plan

Map the full fraud taxonomy (card-not-present, phishing/vishing, SIM swap, account takeover, mule accounts, insider fraud, loan and insurance fraud) and write a one-line definition plus one Indian example for each

Distinguish cyber crime from traditional fraud by listing the technology element that makes each category 'cyber'

Build a fraud risk register template with likelihood, impact, detection source and control owner columns

Explain the fraud triangle and apply it to at least three banking-specific scenarios

Trace how a digital payment fraud unfolds end-to-end (customer device, channel, switch, beneficiary bank) and identify the control point at each stage

Compare fraud risk controls across channels: ATM, POS, net banking, UPI and mobile wallet

Describe the role of transaction monitoring rules, velocity checks and device fingerprinting in fraud detection

Draft a customer liability matrix for unauthorised electronic transactions, referencing limited-liability and zero-liability principles

Define confidentiality, integrity and availability with one banking control example for each

Explain the layered security model: perimeter, network, endpoint, application, data and identity

List the main categories of cyber security threats to banks (malware/ransomware, DDoS, social engineering, supply chain, insider misuse) and the primary control against each

Summarise the purpose of key security technologies: firewall, IDS/IPS, SIEM, DLP, endpoint detection and response, and multi-factor authentication

Explain the cyber security framework and governance structure expected in a bank: board oversight, CISO role, three lines of defence, cyber crisis management plan

Describe patch management, vulnerability assessment and penetration testing cycles and why they matter for audit findings

Outline incident response stages from detection to post-incident review, and state who reports to whom

Identify the security expectations for digital banking channels, including customer authentication and transaction signing

Apply the KYC process step by step: customer identification, verification, risk categorisation, ongoing due diligence and periodic updation

Differentiate simplified, normal and enhanced due diligence and state when each applies

Explain customer due diligence for legal entities, including beneficial ownership identification

Distinguish KYC from AML and CFT, and describe how transaction monitoring feeds suspicious activity reporting

List the key record-keeping and reporting obligations and the retention periods normally expected

Classify suspicious transaction indicators across cash, wire, trade and digital channels

Describe the full STR/SAR lifecycle: detection, internal escalation, decision, filing and feedback

Explain targeted financial sanctions screening, name screening and false-positive handling

Outline the roles of the compliance officer, principal officer and the Financial Intelligence Unit in the reporting chain

Map common AML/CFT programme failures that attract supervisory action

Describe preventive vigilance tools: rotation of staff, maker-checker, dual custody, surprise verification and whistleblower channels

Plan a fraud investigation: evidence collection, chain of custody, interviewing, root cause analysis and reporting

Distinguish staff accountability proceedings from criminal proceedings and state how they run in parallel

Summarise regulatory reporting obligations for frauds, including classification, reporting timelines and board-level reporting

Explain root cause analysis outputs and how they feed back into control design

Reconcile all four domains into one integrated case study: a UPI fraud plus mule account plus weak KYC control

Sit two timed mock tests and score each domain separately to locate weak areas

Rewrite personal notes for any domain scoring below 60 percent, focusing on the missed concepts

Recite the key regulatory obligations and timelines from memory without notes