Skip to content

FRM Part II · FRM Exam Part II · Case Study: Cyberthreats and Information Security Risks

A regional bank's customer-statement database is altered by an attacker who changes several account balances without being detected. Which element of the CIA triad has primarily been compromised?

Integrity has been compromised. Integrity means information remains accurate, complete and free from unauthorized modification. Changing account balances without detection corrupts the data itself, rather than exposing it (confidentiality) or making it inaccessible (availability).

  1. AConfidentiality
  2. BIntegrityCorrect
  3. CAvailability
  4. DNon-repudiation

Explanation

Unauthorized, undetected modification of data breaches integrity, which concerns accuracy and completeness of information. Confidentiality would be breached by disclosure, and availability by loss of access. Non-repudiation is not one of the three CIA elements.

Did you get it right without looking?

One question tells you little. A timed set on Case Study: Cyberthreats and Information Security Risks shows your real accuracy, how long you take and where you lose marks.

More Case Study: Cyberthreats and Information Security Risks questions