Skip to content

FRM Part II · FRM Exam Part II · Cyber-resilience: Range of Practices

A bank hesitates to join a sector-wide cyber threat intelligence exchange because it fears that sharing details will expose it to legal and competitive harm. Which measure would best address this barrier while preserving the benefits of sharing?

Sharing anonymized or trusted-community information under agreed confidentiality protocols best addresses the concern. It lowers legal, reputational and competitive risk while keeping intelligence timely and useful. Waiting until remediation, sharing raw customer data, or only receiving information either weakens value, breaches privacy, or undermines the exchange.

  1. AShare only after the incident has been fully remediated and publicly reported
  2. BShare anonymized or trusted-community information under agreed protocols that protect confidentialityCorrect
  3. CShare raw customer data so that peers can verify the threat
  4. DLimit participation to receiving information without ever contributing

Explanation

Trusted channels with confidentiality protocols and anonymization reduce legal and reputational concerns while allowing timely sharing. Delaying sharing reduces its value, raw customer data creates privacy breaches, and receive-only participation undermines the exchange.

Did you get it right without looking?

One question tells you little. A timed set on Cyber-resilience: Range of Practices shows your real accuracy, how long you take and where you lose marks.

Practise Cyber-resilience: Range of PracticesFree diagnostic mock

More Cyber-resilience: Range of Practices questions