FRM Part II · FRM Exam Part II · Digital Resilience and Financial Stability: The Quest for Policy Tools in the Financial Sector
A regional bank's risk committee is reviewing why supervisors increasingly treat cyber incidents as a potential threat to financial stability rather than only a firm-level operational loss. Which feature of the financial system best explains this view?
Supervisors see cyber incidents as systemic because common technology providers and interconnected networks let a single disruption spread across many institutions simultaneously, producing correlated failures and loss of confidence, which individual firm capital cannot fully absorb.
- ACyber losses are always larger than credit losses at individual banks
- BCommon technology providers and interconnected networks can transmit a single disruption across many institutions at onceCorrect
- CCyber incidents affect only retail customers and not wholesale markets
- DCyber risk is fully diversified away when institutions hold more capital
Explanation
Shared service providers, payment systems and network links mean one disruption can hit many firms simultaneously, creating correlated failures and loss of confidence. Cyber losses are not always larger than credit losses, and capital alone does not remove the contagion channel.
Did you get it right without looking?
One question tells you little. A timed set on Digital Resilience and Financial Stability: The Quest for Policy Tools in the Financial Sector shows your real accuracy, how long you take and where you lose marks.
More Digital Resilience and Financial Stability: The Quest for Policy Tools in the Financial Sector questions
- A regional bank's board asks the risk function to explain how 'digital resilience' differs from traditional cybersecurity. Which statement b…
- A bank tests its resilience using a threat-led penetration test in which ethical hackers mimic real attacker tactics against live production…
- A bank defines an impact tolerance for its payments service: the maximum tolerable disruption is 4 hours. A scenario test shows the service …
- A financial stability authority is weighing capital buffers against operational-resilience requirements as a response to systemic cyber risk…
- A regulator considers using capital requirements as a tool against cyber risk. Which is the strongest argument that capital alone is an insu…
- A risk manager at a payments firm must set an impact tolerance for an important business service. Which statement best describes the purpose…