Skip to content

FRM Part II · FRM Exam Part II · Case Study: Cyberthreats and Information Security Risks

A ransomware attack encrypts a payments processor's servers for 14 hours. No data is copied out of the firm and no records are altered, but customers cannot initiate transfers. Which assessment of the CIA triad is most accurate?

Availability was the primary element breached. The attack prevented customers and staff from accessing systems for 14 hours, while the facts show no data was disclosed or its content altered. Encryption by ransomware denies access rather than exposing information, so confidentiality and integrity are not necessarily affected.

  1. AAvailability was primarily breached; confidentiality and integrity were not necessarily affectedCorrect
  2. BConfidentiality was primarily breached because the data was encrypted
  3. CIntegrity was primarily breached because the files were changed by encryption
  4. DAll three elements were equally breached because the servers were attacked

Explanation

The key consequence is that authorized users could not access systems and services, which is an availability failure. The facts state nothing was exfiltrated or altered in substance, so confidentiality and integrity are not shown to be breached. Encryption by an attacker is a denial of access, not disclosure.

Did you get it right without looking?

One question tells you little. A timed set on Case Study: Cyberthreats and Information Security Risks shows your real accuracy, how long you take and where you lose marks.

Practise Case Study: Cyberthreats and Information Security RisksFree diagnostic mock

More Case Study: Cyberthreats and Information Security Risks questions