Skip to content

FRM Part II · FRM Exam Part II · Case Study: Cyberthreats and Information Security Risks

A bank classifies four threat scenarios by actor motivation to prioritize controls. Which pairing of actor and primary motivation is most accurate?

Organized cybercriminal groups are primarily motivated by financial gain, using ransomware, fraud and data theft. The other pairings are mismatched: nation-states pursue espionage or strategic aims, hacktivists seek publicity for causes, and grievance insiders typically seek revenge or sabotage rather than website defacement for ideology.

  1. ANation-state actor: mainly quick personal financial gain through small card fraud
  2. BHacktivist: mainly strategic espionage over many years with no public disclosure
  3. COrganized cybercriminal group: mainly financial gain through ransomware and fraudCorrect
  4. DInsider with a grievance: mainly ideological protest by defacing public websites

Explanation

Organized criminal groups are primarily financially motivated, using ransomware, fraud and data theft for profit. Nation-states are chiefly associated with espionage or strategic disruption, not small card fraud. Hacktivists seek public attention for causes, not covert espionage, and grievance insiders typically seek revenge or sabotage.

Did you get it right without looking?

One question tells you little. A timed set on Case Study: Cyberthreats and Information Security Risks shows your real accuracy, how long you take and where you lose marks.

Practise Case Study: Cyberthreats and Information Security RisksFree diagnostic mock

More Case Study: Cyberthreats and Information Security Risks questions