Skip to content

FRM Part II · FRM Exam Part II · Cyber-resilience: Range of Practices

A bank replicates its core ledger to a secondary site every 30 minutes in batches. A ransomware event corrupts the primary at 10:20, and the last successful replication completed at 10:00. Management's stated RPO is 15 minutes. Which conclusion is most appropriate?

The RPO is not met. Replication every 30 minutes means up to 30 minutes of data can be lost, and in this event 20 minutes were lost, both exceeding the 15-minute tolerance. Having a clean secondary copy or a good RTO does not change this.

  1. AThe RPO is met, because the replication interval is shorter than the RTO
  2. BThe RPO is met, because the secondary site holds a clean copy
  3. CThe RPO is not met by design, because the replication interval of 30 minutes exceeds the 15-minute tolerance for data lossCorrect
  4. DThe RPO cannot be assessed until the RTO has been measured

Explanation

With batch replication every 30 minutes, up to 30 minutes of data can be lost, which exceeds the 15-minute RPO. In this event 20 minutes of transactions are lost, also over 15. Having a clean copy does not satisfy the RPO, and RTO is a separate measure.

Did you get it right without looking?

One question tells you little. A timed set on Cyber-resilience: Range of Practices shows your real accuracy, how long you take and where you lose marks.

Practise Cyber-resilience: Range of PracticesFree diagnostic mock

More Cyber-resilience: Range of Practices questions