A. Smaller AIs are legally exempt from all cybersecurity regulation

B. iCAST is only available to AIs based outside Hong Kong

C. Smaller AIs are considered immune to cyberattack

D. C-RAF's risk-based, tiered design means the intensity of assessment (including whether full iCAST is required) is proportionate to the AI's assessed inherent risk and required maturity level

A. Realistic threat intelligence about plausible actors and attack paths relevant to the organisation

B. The organisation's own risk assessment of its most critical business services and assets

C. Which systems happen to be the most technically interesting or novel for the testers to explore, regardless of business relevance

D. Regulatory or supervisory expectations relevant to the organisation's sector

A. Abandon the entire engagement

B. Stop, do not exploit the out-of-scope system, and escalate to the Control Group/Control Team lead for a scope decision before proceeding

C. Proceed immediately, since anything reachable is implicitly in scope

D. Exploit it quietly and mention it only if asked in the final report

A. Methodology documentation has no practical benefit and is rarely maintained in professional practice

B. Well-maintained methodology and knowledge resources support consistent quality, help onboard and train staff effectively, and ensure the practice's approach evolves to reflect current threat intelligence, techniques, and lessons learned

C. Knowledge management is solely the concern of very large, multinational providers, irrelevant to smaller practices

D. Methodology documentation should never be updated once initially created, to preserve consistency

A. PIRs are irrelevant to threat intelligence and belong only to military contexts

B. PIRs are the specific, prioritised questions the threat intelligence work needs to answer to support the engagement's objectives (e.g., "which threat actors are most plausible for this organisation's sector and geography?"), helping focus collection and analysis effort effectively

C. PIRs are set exclusively by the Red Team technical delivery team, with no analyst input

D. PIRs are a synonym for the final Red Team Test Report

A. Aggregate lessons can only be shared with the media

B. All individual reports are published in full on the ECB website

C. Authorities may use anonymised or thematic insights from tests across entities to inform sector-wide resilience initiatives, without disclosing individual entities' sensitive findings

D. Nothing; there is no mechanism for sector-level learning

A. Personal device use is irrelevant to Rules of Engagement and does not need to be addressed

B. The client's own IT policy on personal devices is entirely irrelevant to the engagement

C. Personal devices and accounts should always be used, since this best simulates real attacker behaviour

D. The RoE should typically require the use of approved, provider-managed and appropriately secured infrastructure and accounts, avoiding personal devices or accounts, to maintain security, accountability, and clear evidential/audit boundaries

A. The prime contract and client authorisation should explicitly address whether subcontracting is permitted, and the subcontractor's activity must remain within the scope and terms the client has actually authorised, with appropriate flow-down of confidentiality and security obligations

B. Subcontractors do not need any separate consideration, since the prime contractor's authorisation automatically covers them

C. Subcontractors are legally exempt from all liability regardless of their actions

D. Subcontractor use is always prohibited in professional red team engagements

A. Legacy systems are irrelevant to scoping discussions since they are rarely internet-facing

B. Legacy systems should always be excluded automatically without any risk-based discussion

C. Legacy systems should always be included with no additional precaution, since they are often the most realistic targets

D. The specific risk these systems present should be discussed with relevant stakeholders, and a proportionate approach agreed - which might include careful, limited testing, exclusion, or testing in a closely supervised manner with enhanced contingency planning

A. Maximising the provider's short-term profit on any single engagement, regardless of other considerations

B. Ensuring the Red Team always successfully compromises every objective, regardless of what that does or does not demonstrate about client resilience

C. Ensuring that every engagement is delivered safely, legally, to a high professional standard, and in a way that genuinely improves the client's real-world cyber resilience - while remaining a sustainable, well-managed, and commercially viable practice

D. Achieving the fastest possible completion time on every engagement, regardless of other outcomes

A. The AI's external auditor for financial statements

B. The AI's marketing department

C. An accredited external provider that researches and produces intelligence on threat actors and attack scenarios plausible for the specific AI

D. The HKMA's press office