Skip to content

ACCA Applied Knowledge · Business and Technology · Technological factors

A bank adopts a new mobile payments platform and its board wants to manage the cyber risks in a way that is proportionate and consistent with good governance. Which action best achieves this?

The board should ensure risks are assessed, controls are implemented and monitored, and results are reported regularly to the board. This provides oversight and a proactive approach. Delegating entirely to IT, relying only on insurance or reacting after a breach fails to manage the risk adequately.

  1. ADelegating all cyber risk decisions to the IT department with no board reporting
  2. BAssessing the risks, implementing controls and monitoring them with regular reporting to the boardCorrect
  3. CRelying solely on insurance and implementing no preventive controls
  4. DWaiting until a breach occurs before assessing the risks

Explanation

Good governance requires the board to oversee a cycle of risk assessment, control implementation and monitoring with reporting. Leaving it wholly to IT removes oversight, insurance alone only transfers some financial loss, and waiting for a breach is reactive.

Did you get it right without looking?

One question tells you little. A timed set on Technological factors shows your real accuracy, how long you take and where you lose marks.

More Technological factors questions