FRM Part II · FRM Exam Part II · Digital Resilience and Financial Stability: The Quest for Policy Tools in the Financial Sector
A regional bank's security team detects a new ransomware variant targeting payment systems. It wants to alert peers quickly without exposing customer data or admitting liability. Which feature of a well-designed industry information-sharing arrangement best supports this aim?
The best feature is sharing anonymized or sanitized threat indicators in a trusted forum with legal safe harbors. This lets peers defend quickly while protecting customer data and limiting liability, whereas public raw logs, delayed sharing or purely internal sharing undermine collective defense.
- ASharing only anonymized or sanitized threat indicators through a trusted forum with clear legal safe harborsCorrect
- BPublishing full incident logs, including customer records, on a public website
- CWaiting until the regulator completes its investigation before sharing any indicators
- DRestricting sharing to the bank's own subsidiaries only
Explanation
Effective sharing relies on trust, speed and legal protection. Sanitized indicators shared in a trusted forum with safe harbors let peers defend themselves while protecting customer data and limiting liability. Publishing raw logs breaches privacy, and waiting or sharing only internally defeats the collective-defense purpose.
Did you get it right without looking?
One question tells you little. A timed set on Digital Resilience and Financial Stability: The Quest for Policy Tools in the Financial Sector shows your real accuracy, how long you take and where you lose marks.
More Digital Resilience and Financial Stability: The Quest for Policy Tools in the Financial Sector questions
- A supervisor reviewing digital resilience notes that a cyber incident at one bank could spread to others. Which transmission channel is MOST…
- A central bank wants to test whether the sector can withstand a cyber event. A stress scenario assumes that a major service provider failure…
- A bank defines its impact tolerance for its payments service as a maximum of 6 hours of disruption. A scenario test shows recovery takes 9 h…
- A regulator wants to identify which ICT third parties are critical to the financial sector as a whole. Which criterion best indicates a prov…
- A supervisor is concerned that many banks rely on the same cloud provider, so one outage could disrupt payments across the system at once. W…
- A supervisor is designing a framework to limit systemic risk from the concentration of many banks on a single cloud provider. Which policy t…