Skip to content

FRM Part II · FRM Exam Part II · Case Study: Cyberthreats and Information Security Risks

A bank's risk committee is classifying threat actors. One group aims to disrupt a bank's public website during a political controversy to publicise its cause, with no intent to steal funds. Which classification and primary motivation is most appropriate?

The group is best classed as hacktivist. Its aim is ideological or publicity-driven disruption linked to a political controversy rather than theft. Cybercriminals pursue profit, state actors usually act covertly for strategic or intelligence goals, and nothing in the scenario points to an insider with a grievance.

  1. AHacktivist, motivated by ideology or publicityCorrect
  2. BOrganised cybercriminal group, motivated by direct financial gain
  3. CState-sponsored actor, motivated by long-term espionage
  4. DMalicious insider, motivated by personal grievance with the employer

Explanation

Disruption timed to a political issue, aimed at publicity and without theft, is characteristic of hacktivism. Cybercriminals seek profit, state actors typically seek intelligence or strategic effect covertly, and the scenario describes no insider.

Did you get it right without looking?

One question tells you little. A timed set on Case Study: Cyberthreats and Information Security Risks shows your real accuracy, how long you take and where you lose marks.

Practise Case Study: Cyberthreats and Information Security RisksFree diagnostic mock

More Case Study: Cyberthreats and Information Security Risks questions