Skip to content

FRM Part II · FRM Exam Part II · Case Study: Cyberthreats and Information Security Risks

After a data breach, a bank's post-incident review finds that the attack went undetected for 90 days because logs from several critical systems were not centrally monitored. Which remediation most directly addresses this root cause?

Integrating critical system logs into centralized monitoring with alerting on anomalies is the best fix. The root cause was a detection failure from unmonitored logs, and the other options transfer loss or address different weaknesses rather than shortening time to detection.

  1. AIncrease the cyber insurance limit
  2. BIntegrate critical system logs into a centralized monitoring tool with alerting on anomalous activityCorrect
  3. CShorten the password expiry cycle to 30 days
  4. DRequire annual cybersecurity awareness training for the board

Explanation

The failure was detection, caused by unmonitored logs. Centralized log monitoring with alerting directly closes that gap. Insurance transfers financial loss, and password rotation and training do not address detection.

Did you get it right without looking?

One question tells you little. A timed set on Case Study: Cyberthreats and Information Security Risks shows your real accuracy, how long you take and where you lose marks.

Practise Case Study: Cyberthreats and Information Security RisksFree diagnostic mock

More Case Study: Cyberthreats and Information Security Risks questions