FRM Part II · FRM Exam Part II · Digital Resilience and Financial Stability: The Quest for Policy Tools in the Financial Sector
A regulator proposes a systemic tool that sets an impact tolerance for important business services, such as the maximum tolerable disruption, and requires firms to show they can remain within it under severe but plausible scenarios. What is the main rationale for this tool in the context of financial stability?
Impact tolerances shift the emphasis from preventing every incident to ensuring critical services can keep running or be restored within acceptable limits. That limits harm to customers and the wider system, though it cannot eliminate incidents or replace capital.
- AIt eliminates the probability of any cyber incident
- BIt shifts focus from preventing every incident to ensuring critical services can continue or be restored, limiting harm to the systemCorrect
- CIt replaces all capital requirements for operational risk
- DIt guarantees that insurance will cover all losses
Explanation
Impact tolerances accept that incidents will occur and emphasise continuity of critical services. This limits systemic harm. They do not remove incident probability, substitute for capital, or guarantee insurance recoveries.
Did you get it right without looking?
One question tells you little. A timed set on Digital Resilience and Financial Stability: The Quest for Policy Tools in the Financial Sector shows your real accuracy, how long you take and where you lose marks.
More Digital Resilience and Financial Stability: The Quest for Policy Tools in the Financial Sector questions
- A central bank is designing a system-wide cyber stress test. Which feature best distinguishes a macroprudential cyber scenario from a firm-l…
- A regional bank's risk committee is reviewing its approach to operational disruption from cyber incidents. Management proposes to shift focu…
- An authority wants early warning of building systemic digital risk. Which indicator would be most useful for a macroprudential monitoring fr…
- A supervisor wants to reduce systemic risk from financial institutions' reliance on a few large cloud and ICT providers. Which policy tool m…
- During a severe cyber incident affecting a payment service provider used by many banks, authorities in several jurisdictions need to respond…
- A regional bank runs its core payments platform, fraud monitoring and customer app on a single cloud provider. The risk team notes that an o…