FRM Part II · FRM Exam Part II · Cyber-resilience: Range of Practices
A mid-sized bank hesitates to share cyber incident details with peers, citing concerns about confidentiality and reputational damage. Which approach best addresses these concerns while preserving the benefits of information sharing?
A trusted sharing arrangement with agreed protocols, including anonymisation or handling classifications, lets the bank exchange timely, actionable indicators while protecting confidential and reputational details. Waiting for publicity or slow regulator circulation loses timeliness, and sharing customer data adds new risk.
- AShare only after the incident is publicly disclosed in the press
- BUse a trusted sharing arrangement with agreed protocols, such as anonymised or classified-level sharing, so actionable indicators are exchanged without revealing sensitive identity detailsCorrect
- CShare full customer-level data to make intelligence more precise
- DRely solely on regulators to circulate information years later
Explanation
Trusted channels with clear protocols and anonymisation allow timely, actionable sharing while protecting sensitive information. Sharing customer data creates new risk, and waiting for press or delayed regulators loses timeliness.
Did you get it right without looking?
One question tells you little. A timed set on Cyber-resilience: Range of Practices shows your real accuracy, how long you take and where you lose marks.
More Cyber-resilience: Range of Practices questions
- A bank runs a critical service whose business-impact analysis shows losses of USD 2 million per hour of outage after the first 2 hours (no l…
- A bank wants its cyber risk assessment to reflect the threat landscape. Which approach is most consistent with good practice for incorporati…
- A bank scores four cyber scenarios by annual likelihood and loss per event. Expected annual loss = likelihood x loss. Scenario A: 0.50 x $1.…
- A bank's board asks the CISO to explain how cyber-resilience differs from traditional cyber-security. Which description best captures the di…
- After a ransomware attack encrypts a payment processor's production systems, the firm restores from backups that were stored on the same net…
- A bank runs a cyber risk assessment and finds that a customer-facing payment application has a high-severity vulnerability. Threat intellige…