FRM Part II · FRM Exam Part II · Case Study: Cyberthreats and Information Security Risks
A regional bank's customer-statement database is altered by an attacker who changes several account balances without being detected. Which element of the CIA triad has primarily been compromised?
Integrity has been compromised. Integrity means information remains accurate, complete and free from unauthorized modification. Changing account balances without detection corrupts the data itself, rather than exposing it (confidentiality) or making it inaccessible (availability).
- AConfidentiality
- BIntegrityCorrect
- CAvailability
- DNon-repudiation
Explanation
Unauthorized, undetected modification of data breaches integrity, which concerns accuracy and completeness of information. Confidentiality would be breached by disclosure, and availability by loss of access. Non-repudiation is not one of the three CIA elements.
Did you get it right without looking?
One question tells you little. A timed set on Case Study: Cyberthreats and Information Security Risks shows your real accuracy, how long you take and where you lose marks.
More Case Study: Cyberthreats and Information Security Risks questions
- A bank estimates a cyber outage of its online platform would occur once every 4 years on average. Each event would cost USD 2.4 million in l…
- A payments firm sets a recovery time objective (RTO) of 4 hours and a recovery point objective (RPO) of 15 minutes for its card authorizatio…
- A bank estimates that a ransomware event has a 5% annual probability. If it occurs, expected loss is USD 20 million. A new offline-backup co…
- After a cyber incident, a bank's post-incident review finds that the response playbook was sound but staff had never rehearsed it, causing d…
- A bank's risk team estimates that a ransomware event occurs on average 0.4 times per year (Poisson frequency). Each event causes an expected…
- A bank's threat intelligence unit reports that a criminal group compromised a small software vendor and pushed a malicious update that was t…