FRM Part II · FRM Exam Part II · Risk Mitigation
A bank's critical service relies on a single cloud provider. Tests show the following recovery times: application restart 2 hours, database restoration 5 hours (can begin only after the application restart finishes), and reconciliation of data 1 hour (can run in parallel with database restoration but needs the restart complete). The impact tolerance is 6 hours. What is the end-to-end recovery time and does it meet tolerance?
Recovery takes 7 hours, which breaches the 6-hour impact tolerance. The 2-hour restart must finish first, then database restoration of 5 hours and the parallel 1-hour reconciliation run together, so the critical path is 2 plus 5. Summing all three tasks to 8 hours ignores parallelism.
- A7 hours; it breaches the toleranceCorrect
- B8 hours; it breaches the tolerance
- C5 hours; it meets the tolerance
- D6 hours; it meets the tolerance
Explanation
Restart takes 2 hours. Then database restoration (5 hours) and reconciliation (1 hour) run in parallel, so the longer path of 5 hours governs: 2 + 5 = 7 hours. This exceeds the 6-hour tolerance. Adding all three gives 8, which ignores parallel work.
Did you get it right without looking?
One question tells you little. A timed set on Risk Mitigation shows your real accuracy, how long you take and where you lose marks.
More Risk Mitigation questions
- A bank considers shifting part of its cyber risk to a captive insurance subsidiary that reinsures with external markets. Which statement bes…
- A bank has a cyber insurance policy with a USD 50 million limit. Its scenario analysis shows a severe but plausible cyber event could cause …
- A broker-dealer runs a business impact analysis for its trade settlement function. Management finds that the function's RTO of 8 hours is sh…
- Internal audit finds that a bank's access-review control is well designed but was not performed in two of the last four quarters. How should…
- A bank's security team wants to ensure that no single administrator can both create a new payment beneficiary and approve payments to that b…
- A bank's operational resilience framework identifies its critical operations and sets an impact tolerance for each. What does an impact tole…