Skip to content

FRM Part II · FRM Exam Part II · Case Study: Cyberthreats and Information Security Risks

A bank's payment-processing database is hit by ransomware that encrypts the files, so tellers and customers cannot access account balances for six hours. No data is altered or copied by the attackers. Which element of the CIA triad was primarily compromised?

Availability was primarily compromised. Ransomware encrypted the files so authorised users could not reach balances for six hours, while the data was neither altered nor disclosed. Availability concerns timely, reliable access to systems and data, which is exactly what was lost here.

  1. AConfidentiality
  2. BIntegrity
  3. CAvailabilityCorrect
  4. DNon-repudiation

Explanation

Availability means authorised users can access systems and data when needed. Encryption of files blocked access for six hours. Data was neither disclosed (confidentiality) nor altered (integrity), so those options do not describe the primary loss.

Did you get it right without looking?

One question tells you little. A timed set on Case Study: Cyberthreats and Information Security Risks shows your real accuracy, how long you take and where you lose marks.

Practise Case Study: Cyberthreats and Information Security RisksFree diagnostic mock

More Case Study: Cyberthreats and Information Security Risks questions