FRM Part II · FRM Exam Part II · Digital Resilience and Financial Stability: The Quest for Policy Tools in the Financial Sector
A bank's critical payment processing runs on a single cloud service provider that also hosts the platforms of most of its peer banks in the same jurisdiction. A supervisor is most concerned about which type of risk arising from this arrangement?
The main concern is systemic concentration risk. When many banks depend on the same cloud provider, one outage or cyber incident at that provider can disrupt multiple institutions simultaneously, turning a single firm's operational problem into a threat to financial stability.
- ASystemic concentration risk, because one provider failure could disrupt many institutions at the same timeCorrect
- BBasel market risk, because cloud fees fluctuate with interest rates
- CIdiosyncratic credit risk of the bank's retail borrowers
- DModel risk in the bank's internal VaR engine
Explanation
Heavy reliance of many financial institutions on one cloud provider creates a common point of failure. An outage or cyber event at the provider can hit many firms at once, making it a system-wide concentration issue. The other options describe unrelated risk types.
Did you get it right without looking?
One question tells you little. A timed set on Digital Resilience and Financial Stability: The Quest for Policy Tools in the Financial Sector shows your real accuracy, how long you take and where you lose marks.
More Digital Resilience and Financial Stability: The Quest for Policy Tools in the Financial Sector questions
- A regional bank's board asks the risk function to explain how 'digital resilience' differs from traditional cybersecurity as discussed in po…
- A regional bank's board asks the risk function to explain how 'digital resilience' differs from traditional cybersecurity. Which statement b…
- A bank tests its resilience using a threat-led penetration test in which ethical hackers mimic real attacker tactics against live production…
- A bank defines an impact tolerance for its payments service: the maximum tolerable disruption is 4 hours. A scenario test shows the service …
- A financial stability authority is weighing capital buffers against operational-resilience requirements as a response to systemic cyber risk…
- A regulator considers using capital requirements as a tool against cyber risk. Which is the strongest argument that capital alone is an insu…