FRM Part II · FRM Exam Part II · Digital Resilience and Financial Stability: The Quest for Policy Tools in the Financial Sector
A regional bank's risk committee is reviewing its approach to operational disruption from cyber incidents. Management proposes to shift focus from solely preventing cyberattacks to also ensuring that critical services can continue and recover quickly after a successful attack. Which concept best describes this broadened objective in the digital resilience literature?
Digital resilience is the correct concept. It covers not only preventing cyber incidents but also withstanding them, responding and recovering so critical services keep running. Pure cybersecurity hardening focuses on prevention only, so it does not capture the broader continuity and recovery objective.
- ADigital resilience, which emphasizes the ability to prevent, withstand, respond to and recover from disruptionsCorrect
- BCybersecurity hardening, which emphasizes only perimeter defenses against intrusion
- CCapital adequacy, which emphasizes absorbing credit losses through higher buffers
- DModel validation, which emphasizes independent testing of quantitative models
Explanation
Digital resilience goes beyond prevention to include withstanding, responding to and recovering from incidents so critical services continue. Perimeter-only cybersecurity addresses prevention and does not cover continuity and recovery. Capital and model validation address different risks.
Did you get it right without looking?
One question tells you little. A timed set on Digital Resilience and Financial Stability: The Quest for Policy Tools in the Financial Sector shows your real accuracy, how long you take and where you lose marks.
More Digital Resilience and Financial Stability: The Quest for Policy Tools in the Financial Sector questions
- Payment system A processes 40% of a country's retail payments. A cyber attack makes it unavailable for 6 hours. Banks' recovery time objecti…
- A central bank is designing a system-wide cyber stress test. Which feature best distinguishes a macroprudential cyber scenario from a firm-l…
- An authority wants early warning of building systemic digital risk. Which indicator would be most useful for a macroprudential monitoring fr…
- A supervisor wants to reduce systemic risk from financial institutions' reliance on a few large cloud and ICT providers. Which policy tool m…
- During a severe cyber incident affecting a payment service provider used by many banks, authorities in several jurisdictions need to respond…
- A regional bank runs its core payments platform, fraud monitoring and customer app on a single cloud provider. The risk team notes that an o…