FRM Part II · FRM Exam Part II · Digital Resilience and Financial Stability: The Quest for Policy Tools in the Financial Sector
A bank's resilience team sets an impact tolerance for its payments service. Which description correctly reflects how an impact tolerance is used within an operational resilience framework?
An impact tolerance is the maximum tolerable disruption to a critical service, often expressed as a time limit, that a firm should remain within even under severe but plausible scenarios. It is not a loss forecast, capital charge or incident probability.
- AThe maximum tolerable level of disruption to a critical service, such as a time limit, that the firm should stay within even in severe but plausible scenariosCorrect
- BThe expected annual loss from cyber incidents, used to set insurance premiums
- CThe amount of capital required to cover operational losses at the 99.9% confidence level
- DThe probability that a cyber incident will occur in a given year
Explanation
Impact tolerance expresses the maximum tolerable disruption (for example, duration or harm) for an important service, and firms test whether they can remain within it under severe but plausible scenarios. It is not a loss estimate, a capital figure or a likelihood measure.
Did you get it right without looking?
One question tells you little. A timed set on Digital Resilience and Financial Stability: The Quest for Policy Tools in the Financial Sector shows your real accuracy, how long you take and where you lose marks.
More Digital Resilience and Financial Stability: The Quest for Policy Tools in the Financial Sector questions
- A supervisor wants a framework that reflects the view that cyber incidents at financial institutions can become systemic. Which policy appro…
- A regional bank migrates its core payment processing to a single cloud provider to cut costs. Which feature of this change most directly rai…
- A regional bank's security team detects a new ransomware variant targeting payment systems. It wants to alert peers quickly without exposing…
- An insurer writes cyber policies with a 1,000 policy portfolio, each with a 4 million limit. It estimates an independent annual claim probab…
- A supervisor is assessing why the cyber insurance market may be unable to absorb systemic digital shocks. Which feature of cyber risk most d…
- Which feature best describes threat-led penetration testing as used in digital resilience frameworks?