Skip to content

FRM Part II · FRM Exam Part II · Case Study: Cyberthreats and Information Security Risks

An insider at an investment firm emails a spreadsheet of client portfolios to a personal account, but the spreadsheet remains unchanged and the firm's systems stay fully operational. Which statement best describes the information security impact?

This is a confidentiality breach only. Client portfolio data was disclosed to an unauthorized destination, while the spreadsheet was not altered, preserving integrity, and systems stayed operational, preserving availability.

  1. AA confidentiality breach onlyCorrect
  2. BAn integrity breach and an availability breach
  3. CAn availability breach only
  4. DA breach of all three CIA elements

Explanation

Unauthorized disclosure of client data is a confidentiality breach. The data was not modified, so integrity is intact, and systems remained operational, so availability is intact.

Did you get it right without looking?

One question tells you little. A timed set on Case Study: Cyberthreats and Information Security Risks shows your real accuracy, how long you take and where you lose marks.

Practise Case Study: Cyberthreats and Information Security RisksFree diagnostic mock

More Case Study: Cyberthreats and Information Security Risks questions