FRM Part II · FRM Exam Part II · Cyber-resilience: Range of Practices
A bank's cyber team joins an industry forum in which members exchange indicators of compromise and attack techniques shortly after detecting them. Which is the primary resilience benefit the bank gains from this participation?
The main benefit is early awareness: by receiving indicators and techniques observed at peer institutions, the bank can strengthen detection and defences before the same threats target it. Sharing does not transfer liability, replace internal exercises, or remove regulatory reporting obligations.
- AIt transfers legal liability for any breach to other forum members
- BIt can update its own detection and defences against threats already seen elsewhere before they reach itCorrect
- CIt removes the need to run internal incident response exercises
- DIt guarantees that regulators will waive reporting of significant incidents
Explanation
Sharing threat intelligence lets firms learn from attacks on peers and tune controls early. It does not shift liability, replace exercises, or waive regulatory reporting duties.
Did you get it right without looking?
One question tells you little. A timed set on Cyber-resilience: Range of Practices shows your real accuracy, how long you take and where you lose marks.
More Cyber-resilience: Range of Practices questions
- Nordvik Bank's CISO reports to the head of IT, who also owns system delivery deadlines. An internal review finds that security findings are …
- A regulator-style review of a firm's cyber resilience finds that its incident response plan has never been tested against a scenario in whic…
- A bank segments its network so that the payments environment sits in a separate zone with tightly restricted traffic from the corporate netw…
- A mid-sized bank's cyber team receives a threat indicator from an industry sharing forum about a new phishing campaign. Which use of this in…
- A bank wants its cyber-resilience strategy to be integrated with enterprise risk management. Which approach best achieves this?
- A bank's board is reviewing its cyber strategy. Management proposes to focus only on preventing every intrusion at the perimeter. Which stat…