Skip to content

FRM Part II · FRM Exam Part II · Case Study: Cyberthreats and Information Security Risks

After a cyber incident, a bank's post-incident review finds that the response playbook was sound but staff had never rehearsed it, causing delays in escalation. Which resilience measure most directly addresses this finding?

Regular scenario-based exercises and simulations best address the finding, because the playbook was sound but unrehearsed, causing escalation delays. Practice tests escalation paths and builds familiarity, whereas insurance, extra detection tools or longer log retention do not fix a lack of rehearsal.

  1. AConducting regular scenario-based exercises and simulations of the playbookCorrect
  2. BIncreasing cyber insurance limits
  3. CPurchasing additional intrusion detection software
  4. DExtending the data retention period for logs

Explanation

The weakness is lack of practice, not the plan's content or tooling. Regular tabletop and simulation exercises test escalation paths and build familiarity. Insurance transfers financial loss, and detection tools or log retention do not fix rehearsal gaps.

Did you get it right without looking?

One question tells you little. A timed set on Case Study: Cyberthreats and Information Security Risks shows your real accuracy, how long you take and where you lose marks.

Practise Case Study: Cyberthreats and Information Security RisksFree diagnostic mock

More Case Study: Cyberthreats and Information Security Risks questions