Skip to content

FRM Part II · FRM Exam Part II · Case Study: Cyberthreats and Information Security Risks

A bank classifies threat actors by motivation. Which pairing of actor and typical primary motivation is most accurate?

Organised cybercriminal groups are mainly motivated by financial gain, using ransomware, fraud and data theft. Hacktivists seek ideological publicity and nation-states pursue strategic goals such as espionage, so the other pairings misattribute motives.

  1. AOrganised cybercriminal group: financial gainCorrect
  2. BHacktivist: long-term state intelligence collection
  3. CNation-state actor: publicity for a social cause only
  4. DDisgruntled insider: espionage on behalf of a foreign ministry as the defining motive

Explanation

Organised criminals typically seek profit through ransomware, fraud and theft. Hacktivists pursue ideological or publicity goals, and nation-states pursue strategic objectives such as espionage or disruption. The insider option misstates the usual grievance-driven motive.

Did you get it right without looking?

One question tells you little. A timed set on Case Study: Cyberthreats and Information Security Risks shows your real accuracy, how long you take and where you lose marks.

Practise Case Study: Cyberthreats and Information Security RisksFree diagnostic mock

More Case Study: Cyberthreats and Information Security Risks questions