Skip to content

FRM Part II · FRM Exam Part II · Case Study: Cyberthreats and Information Security Risks

A bank's risk team is deciding which control best supports confidentiality of customer data held on laptops that may be lost while staff travel. Which control is the most directly aligned with that objective?

Full-disk encryption is the control best aligned with confidentiality here. If a laptop is lost, encrypted data cannot be read by an unauthorized finder. Redundant servers and offsite backups mainly support availability, and checksums mainly support integrity through detection of changes.

  1. AFull-disk encryption of laptopsCorrect
  2. BRedundant servers in a secondary data centre
  3. CHash-based file checksums to detect changes
  4. DDaily backups stored offsite

Explanation

Encryption prevents unauthorized readers from using data on a lost device, directly protecting confidentiality. Redundant servers and backups support availability, while checksums support integrity by detecting modification.

Did you get it right without looking?

One question tells you little. A timed set on Case Study: Cyberthreats and Information Security Risks shows your real accuracy, how long you take and where you lose marks.

Practise Case Study: Cyberthreats and Information Security RisksFree diagnostic mock

More Case Study: Cyberthreats and Information Security Risks questions